Re: DCM verisign ?

Yep, that error is pretty much the same as an RC(23) which means not
trusted.

So you'll need to import one or more Certificate Authorities (CAs).

You will most likely need to follow the instructions using OpenSSL to
retrieve the server certificate which you can then use to strip of the CAs
from the cert and import into your *SYSTEM store.

Brad
www.bvstools.com


On Mon, Jul 29, 2013 at 9:36 AM, Jack Kingsley <iseriesflorida@xxxxxxxxx>wrote:

TELNET SSL on 992 between ISERIES machines. Errors out with a CPDBC97.
Thanks for the link, I will look that over as well.


On Mon, Jul 29, 2013 at 9:23 AM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

Hi, Jack.

Assuming you're talking about Certificate Authorities, no, not really.

And

Certificates come from many different places besides Verisign.

As a client (FTP, HTTP, etc), you have no control over which certificates
are used by the server unless it's your own server. That means you
probably will end up installing one or two CAs on your system for each
different client you are connecting to.

Could you expand on what you're doing?

I put together some fairly comprehensive SSL documentation a while back

for

my customers but it really applies to any client using SSL:

http://docs.bvstools.com/home/ssl-documentation

If you explain more what you're trying to do, it will be easier to answer
your question.

Brad
www.bvstools.com


On Mon, Jul 29, 2013 at 8:15 AM, Jack Kingsley <iseriesflorida@xxxxxxxxx

wrote:

Is there an easy way to determine that DCM contains all of the

necessary

Verisign certificates.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.