Re: Certificate Authority wont import into DCM

>But if you have it on your PC, you can export it and then import with DCM to your iSeries.

Yes, I have tried that same thing without success. This certificate seems to be a little weird. By "application cert" I am guessing you mean the process of assigning an existing certificate to an SSL Application in DCM right? Is there such a thing as an "application certificate" (asking out of ignorance)?

Thanks for the response,
Aaron Bartell
http://mowyourlawn.com

Chris Bipes wrote:

They may not have generated a certificate for their CA or that is their
CA certificate. You can import it but you have to know the type of
certificate. Not user so is it a CA cert or an application cert? But
if you have it on your PC, you can export it and then import with DCM to
your iSeries. That is how I capture self signed CA from trading
partners.


Chris Bipes
Director of Information Services
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Aaron Bartell
Sent: Wednesday, June 17, 2009 2:29 PM
To: Midrange Systems Technical Discussion
Subject: Re: Certificate Authority wont import into DCM

I am fairly certain that DCM supports self signed certificates. In
the
end Verisign is a CA that self signs it's certs. It just so happens
that
Verisign (among others) come pre-installed as CA's on the IBM i. I
am
wondering if at this point I just need to contact the web service
provider
and figure out how they created this certificate and ask if they can
export the CA instead of the certificate itself (which I am not
exactly
sure which of the two are being offered on the URL that I supplied
earlier
- but I am led to believe it is NOT the CA just because I have
installed
quite a few CA's in the past that were self signed and it should work
the
way I am doing it).

BTW, if anyone is looking for a tutorial of how to install a CA of a
URL
onto your AS400 you can look at the following page:
[1]http://rpg-xml.com/Downloads/Import_Certificate_Authority/Import_Cert
ificate_Authority.html