Re: SFTP with client

Actually you want to import their Certificate Authority(ies) (CA) which
could be referred to as their root certificate. But that makes things
more confusing as a CA really isn't a certificate.

Even from Verisign, I've seen a LOT of machines needing updated CAs. And
a lot more are using tierred CAs now (multiple CAs). So not just the root
CA is needed, but any CA under the root as well.

Bradley V. Stone
BVSTools, Inc.
[1]www.BVSTools.com
[2]www.eRPGSDK.com

Mark Allen wrote:

DUH!!!!

I wondered about that (a certificate) but forgot till just now. I know
we've got a "couple" of certs already on the I already for some web stuff
but I didn't configure it. I'll do some checking here and with them

On Tue, Jun 9, 2009 at 2:59 PM, Chris Bipes [3]<chris.bipes@xxxxxxxxxxxxxxx>wrote:



You have to import their root certificate to your certificate store
using DCM. Most likely they have a self generated SSL certificate, if
it is from some vender such as VeriSign, it should work unless you
certificate store is way out of date. Have you configured SSL on your
system at all?



Chris Bipes
Director of Information Services
CrossCheck, Inc.


-----Original Message-----
From: [4]midrange-l-bounces@xxxxxxxxxxxx
[[5]mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mark Allen
Sent: Tuesday, June 09, 2009 11:53 AM
To: Midrange Systems Technical Discussion
Subject: Re: SFTP with client

Latest word from Vendor was"

Can you try one more thing on the AS400? Can you set the FTP client to
use
SSL again, but this time point it to port 13267 instead of port 13266?
The
later is for SFTP, which you've established isn't supported on your
installation. The 13267 is FTPS (implicit), which is FTP tunneled over
FTP.
This may be what the AS400 is attempting to do.


I tried doing it with FTP to their site with port set to 13267 and
secure
connection set to *SSL which never connects and also with secure
connections
et to *IMPLICIT (which came back with

Connecting to host EXTERNALFTP.XXXXXXX.COM at address 2XX.XX.XXX.XXX
using
port 13267.
Secure connection error, return code -23.


Still not sure why they are having me do this since there documentation
shows they ONLY support the SSH2 protocol which from Scotts very helpful
emails I believe means the native i5 FTP client is NOT going to work no
matter what.

Sorry, Scott didn't mean to imply it was "better" just that it would be
'easier" on this end since I've only got till Friday.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [6]MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [7]http://lists.midrange.com/mailman/listinfo/midrange-l
or email: [8]MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [9]http://archive.midrange.com/midrange-l.




References

Visible links
1. http://www.bvstools.com/
2. http://www.erpgsdk.com/
3. mailto:chris.bipes@xxxxxxxxxxxxxxx
4. mailto:midrange-l-bounces@xxxxxxxxxxxx
5. mailto:midrange-l-bounces@xxxxxxxxxxxx
6. mailto:MIDRANGE-L@xxxxxxxxxxxx
7. http://lists.midrange.com/mailman/listinfo/midrange-l
8. mailto:MIDRANGE-L-request@xxxxxxxxxxxx
9. http://archive.midrange.com/midrange-l