Re: Security and iSeries Navigator Management Central -- MIDRANGE-L

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

On Fri, Jul 23, 2010 at 19:24, Charles Wilt <charles.wilt@xxxxxxxxx> wrote:

Hey what can I say, I'm not the admin here....just a lowly
developer...so of course I can't know anything about admin or
security. Â:/

A developer should always be a superset of what an admin knows. After
all, when developing an application, security should always come
first. At least that's my understanding.

IIRC, it was decided that it'd take too much CPU resources to run all
5250 traffic through SSL.

That's an interesting reasoning ;)

I've downloaded the root CA cert, and loaded it using various methods,
but I can't get it to work. ÂSee:
http://archive.midrange.com/midrange-l/201007/msg00191.html

If you got any thoughts as to what's wrong, I'd love to hear them.

Do you have the right root CA cert? I've always found IBM i Access's
SSL support "interesting" :)

I usually use openssl to debug SSL issues (Windows binaries here:
http://www.deanlee.cn/programming/openssl-for-windows/).

For example, do this:
openssl s_client -connect youribmi:992

This will show you which public certificate the Telnet/SSL server uses.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.