RE: Client Access Certificate Authority

Maybe cycle the host servers?  It needs to pick-up the new cert, and at
least as far as the web servers go, won't happen until you cycle them.
(Case in point, they'll continue to run with an expired cert until the
next time you start them - then they fail.)


--
Justin C. Haase - Solution Engineer
IBM Certified Systems Expert - System i
Kingland Systems Corporation

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Wayne McAlpine
Sent: Monday, January 08, 2007 11:24 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Client Access Certificate Authority

I've run out of ideas on how to get my SSL emulator connection working
again and I'm hoping someone can shed some light on the problem.

I have been running telnet sessions using a local certificate that was
created on the AS/400 three years ago.  This morning, the certificate
expired, so I went in using Certificate Manager and renewed the
certificate.  My recollection was that that was all that should have
been necessary to re-establish communications, but that turned out not
to be the case.  The sessions were still rejected.

Then I did a cut and paste of the certificatedata and re-installed that
using the key management utility in Client Access.  Still no luck.  When
I try to verify the SSL connection in Ops Navigator, all of the services
fail.  The telnet error message is that the AS/400 is not a trusted
site.

Anyone have any suggestions?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



CONFIDENTIALITY NOTICE:  This e-mail communication, including attachments, is 
covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is 
confidential, and may be legally privileged.  If you are not the intended 
recipient or believe you received this communication in error, please reply to 
the sender indicating that fact and delete the copy you received.  In addition, 
retention, dissemination, distribution, copying, or otherwise use of the 
information contained in this communication is strictly prohibited.  Thank you.