RE: Client Access Certificate Authority

Even with an expired certificate you browser will still let you connect.
It will just complain about the invalid cert.  Some TN5250 clients will
ignore an invalid certificate such as Mochasoft.  Each application can
have it's own certificate as well as share one.  I recommend that you
use a different certificate for each fully qualified URL.  You don't
really have to re-ipl, just end and restart services.  I know there is
no restart for Telnet server but if you just do a start, it does re-load
the new certificate without dropping any connections.


Christopher Bipes
Information Services Director
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces+chris.bipes=cross-check.com@xxxxxxxxxxxx
[mailto:midrange-l-bounces+chris.bipes=cross-check.com@xxxxxxxxxxxx] On
Behalf Of Wayne McAlpine
Sent: Monday, January 08, 2007 10:48 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Client Access Certificate Authority

Chris, thanks for the suggestion.  There really is no restart option on
Telnet server like there is for HTTP.  I'm having them re-ipl tonight so
hopefully I'll be back up tomorrow.  BTW, we use a Verisign certificate
for the web site, which is why I was able to get into the certificate
manager.