No, you can get it other ways. Is it a public site (ie, if I ping the FTP
host, will my PC see it, or is it part of your intranet)? If so, shoot me
an email with the FTP site and I'll see if I can't get the certificate and
CAs for you.

bvstone at gmail dot com or bvstone at bvstools dot com

Brad
www.bvstools.com

On Fri, Dec 12, 2014 at 11:11 AM, Gqcy <gmufasa01@xxxxxxxxx> wrote:

Thanks Brad,
is the only way to get the Cert is have them send it to me?
I ask, because their support people seem to think I am crazy asking for
the cert. ("why can't you just click OK?")
is there some magic phrase I need to use?



On 12/12/2014 11:01 AM, Bradley Stone wrote:

You'll need to install the FTP Server's Certificate Authorities (CAs) in
your *SYSTEM store. This is so your IBM i will "trust" the server it
connects to.

I've put together documentation for this:
http://docs.bvstools.com/home/ssl-documentation

You'll want to start by getting the actual certificate (maybe with OpenSSL
unless you can get it through a web browser). Then export the CAs and
finally import them into your *SYSTEM store.

Each step is outlined on the site.

Feel free to contact me for any help offline as well.

Brad
www.bvstools.com

On Fri, Dec 12, 2014 at 10:58 AM, Gqcy<gmufasa01@xxxxxxxxx> wrote:


I am trying to get going with a FTPs (FTP with Explicit SSL)

I have already set up one provider years ago (COVISINT), but am now
attempting to go live with Liaison...

when I attempt to connect from the IBMi, I get "Error -23. Certificate is
not signed by a trusted certificate authority"

and am stopped...

The support people want me to use a tool like FileZilla, so I can
"click ok" and trust the cert. but I don't think the FTP client on the i
supports that!

I seem to recall, back when we set up COVISINT, I had to hunt down the
cert. my self, but can't remember how I did it.

I have some cert details, but don't know how to grab the actual .cer file
needed to push to the IBMi cert. manager...

does anyone have any ideas for me?


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].