There are three steps.
1 create the certificate store (the file that holds all of your certificates)
2 create a CA. This what you use to create application certificates for your server(s). This has a certificate to identify the authority for generating certificates for users, servers, etc...
3 create certificates to assign to users or services.
You most likely created the CA Certificate and had all of your application trust the CA. Now you need to create the certificate for the server.
I can only guess at this time. Are you listening on port 992? If not, try to start the TCP Telnet server. You do not need to end it, just give the start command and it will start the SSL if a certificate is attached to the application. If you still are not listing on 992, go back to DCM.
Chris Bipes
Director of Information Services
CrossCheck, Inc.
707.586.0551, ext. 1102
707.585.5700 FAX
chris.bipes@xxxxxxxxxxxxxxx
www.cross-check.com
Notice of Confidentiality: This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by e-mail (by replying to this message) or telephone (noted above) and permanently delete the original and any copy of any e-mail and any printout thereof. Thank you for your cooperation with respect to this matter.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of fu_james@xxxxxxxxxxxxxx
Sent: Wednesday, January 16, 2008 8:57 AM
To: Midrange Systems Technical Discussion
Subject: RE: telnet-ssl problem
Chris,
When I created my local CA, I assigned all applications(including telnet)
to it. Is that what you mean?
Best Regards.
James Fu
TDL Group Corp. (Tim Hortons)
Oakville, Ontario
Direct: 905-339-5798
fu_james@xxxxxxxxxxxxxx
Web:
http://www.timhortons.com
"Chris Bipes"
<chris.bipes@cros
s-check.com> To
Sent by: "Midrange Systems Technical
midrange-l-bounce Discussion"
s@xxxxxxxxxxxx <midrange-l@xxxxxxxxxxxx>
cc
01/16/2008 11:48 Subject
AM RE: telnet-ssl problem
Please respond to
Midrange Systems
Technical
Discussion
<midrange-l@midra
nge.com>
Get back into DCM and create a certificate to use for Telnet-SSL. The
assign it to your telnet server. The STRTCPSVR *TELNET. Finally check
that you are listening on port 992
NETSTAT *CNN
Chris Bipes
Director of Information Services
CrossCheck, Inc.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
fu_james@xxxxxxxxxxxxxx
Sent: Wednesday, January 16, 2008 8:38 AM
To: Midrange Systems Technical Discussion
Subject: telnet-ssl problem
I am trying telnet-ssl on my 820 (OS V5R3). Here is what I did:
1. local CA created in DCM
2. iSeries Navigator -->Server --> Properties-->Secure Sockets -->
OS/400
Certificate Authority downloaded successfully
3. Checked on "Use SSL for connection" and restart services on 820
4. When I started to Verify SSL connection, I got the following errors
under the telnet:
CWBCO1022 - Remote port 992 will be used
Attempting to establish a connection...
CWBCO1045 - Local address X.X.X.X:X
Connected to telnet-ssl (X.X.X.X:992)
CWBCO1003 -Sockets error, function recv() returned 8405
Checked QUSRSYS/QYSMSVRE index, it is a good one; used netstat to
check
telnet-ssl port on 820, it is sitting there.
Anyone can point out what else should I check. Thanks...
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
http://archive.midrange.com/midrange-l.
The information contained in this message is confidential and may be legally privileged. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, dissemination, or reproduction is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
L'information contenue dans ce message est de nature confidentielle et peut etre de nature privilegiee. Ce message est strictement reserve a l'usage de son ou ses destinataires. Si vous n'etes pas le destinataire prevu, prenez avis, par la presente, que tout usage, distribution, ou copie de ce message est strictement interdit et peut etre illicite. Si vous n'etes pas le destinataire prevu, veuillez en aviser l'expediteur par courriel et detruire tous les exemplaires du message original.
midrange.com
