RE: Certificate Question for iSeries

Larry and Chris,

Thanks for the info and suggestions. (bad spelling is mine I'm sure ;-)
)

When I check the Cert sent (using the PC FTP program & Core FTP is what
I'm using) it shows me a "Common Name" that is the secureftpa.xxx.com
from their production system and
secureftp.xxx.com from their test systems. So I was assuming (dangerous
with as little knowledge as I have I know), that their certificates are
different or at least I need different ones on my end to connect with
both systems.

And I think that is what I'm getting out of both of these messages.

Again Thanks for your help!

-- Jim

The short answer is: secrureftp.xxx.com is NOT equal to
secrureftpa.xxx.com (and it's not spelled very nice either!) Therefore
the certificate won't match that name and you'll get an error. Now you
COULD add a hosts table entry on both the test server as well as the pc
used to test that points the secrureftp.xxx.com to the test server. Then

you could test with the correct name and that would work.

The certificate is issued to that name not to a physical box.

- Larry "DrFranken" Bolhuis


The question is on the test box, are they attempting to use the same
certificate or did they generate their own certificate from their own
self signed certificate so the path is different? By default the
certificate database on the iSeries has the VeriSign CA certificate
installed so the path would be valid. But you would not have the self
signed certificate CA. That is usually the stumbling block. Now using
your PC accept the certificate or at least look at the path to see if it
is the same as the production or some self signed CA.