Re: FTPS Error

[Tim Bronski <tim.bronski@xxxxxxxxx>]

These are the OpenSSL abbreviations for Elliptical Curve Diffie-Hellman 
and Diffie-Hellman Ephemeral but you probably didn't really need to know 
that.  What you need to do is go to your system values QSSLCSL and see 
if you have a series of algorithms marked *ECDHE_xxx, more specifically 
this one:
  *ECDHE_ECDSA_AES_128_CBC_SHA256


On 9/4/2015 9:12 PM, Art Duarte wrote:
> The group replied stating they are doing an EXPLICIT connection. This is the ciphersuite:
>
> TLSCipherSuite             AES128+EECDH:AES128+EDH
>
> How does this translate into IBM i cipher suite?
>
> Thank you
> Art Duarte
>
>
> -----Original Message-----
> From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Chris Bipes
> Sent: Thursday, September 3, 2015 12:33 PM
> To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
> Subject: RE: FTPS Error
>
> Seems like they are using *IMPLICIT on their SSL connection.
>
> So you can connect, but the AUTHTLS command fails as they are using a cipher suite that you do not support.  Call them and find out what cipher suites they support and make sure it is in your system value.
>
> The following command on your iSeries should work:
> FTP RMTSYS('104.238.165.111') PORT(21) SECCNN(*SSL)
>
>
>
> Chris Bipes
> Director of Information Services
> CrossCheck, Inc.
>
>
> -----Original Message-----
> From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Art Duarte
> Sent: Thursday, September 03, 2015 10:08 AM
> To: Midrange Systems Technical Discussion
> Subject: RE: FTPS Error
>
> Yes, Filezilla works fine with the info given.
>
> Does not connect using telnet
>
> I did the following command
> open 104.238.165.111  21
> Message received: Failed to connect
>
> Also tried
> telnet 104.238.165.111 21
> Got a telnet window with message "220 104.238.165.111 FTP server ready"
> I typed status, and got the 550 SSL/TLs required on the control channel
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.