Re: FTP SSL error

Hi Dave,

It's not physically possible to do SSL without certificates. It's possible without any CLIENT-SIDE certificates, which may be what you meant... but the FTP server will always send you a server certificate (automatically, as part of the connection) which your side will have to validate against a CA certificate.

Error -23 means that the server certificate you received couldn't be validated against the CA certificate. Possibly they are using certificates that they generated themselves, or that they got from a CA that you don't have installed (like GoDaddy, for example.)

The solution to that problem is to install the appropriate CA certificate.

As for the "unable to connect" error... I don't have any input on that, other than the obvious... Either the server is down, or a firewall is blocking you.


On 1/18/2011 1:43 PM, daparnin@xxxxxxxxxxxxxx wrote:

I need to connect to a vendor's FTP site to do a file transfer from our i.
We are at V5R4. It has to be a secure transfer and they have given us
the options of SFTP or FTPs. I'm trying FTPs by doing:

FTP RMTSYS('ftp.vendor.com') PORT(6990) SECCNN(*SSL)

When I tried it the first time I got a -23 error. The help text indicated
that this was a certificate problem. We are using a user-id and password
with no certificate. When I try now I'm just getting "Cannot connect to
host" "try agin later". For what it's worth, I can get connected from my
PC using Filezilla.

I've read a few entries in the archives but didn't get any good ideas
other than finding that FTP with SSL is basically FTPs. At least that's
my understanding. Any ideas would be appreciated.

Dave Parnin