Re: openssl for telnet on IBM i?

Hi Larry,

2) Create a self-signed cert in DCM and assign it to Telnet. Then use Port

992 and you are secure. Not sure why people think this is hard.

I've yet to find docs that take you through the 30 steps from start to
finish. In my current scenario I have SSL working with telnet but it only
works for tn5250j and not IBM Access Client Solutions. I prefer ACS
(because keyboard shortcuts actually work on the Mac) but intend to give up
on it again. Here's the error I am getting:
http://www.screencast.com/t/NyYmuVCggldg



Aaron Bartell
litmis.com - Services for open source on IBM i


On Fri, Jan 29, 2016 at 12:15 PM, DrFranken <midrange@xxxxxxxxxxxx> wrote:

As I see it you have these options:

1) Open Telnet on 23 from the world. Not such a good choice.
2) Create a self-signed cert in DCM and assign it to Telnet. Then use Port
992 and you are secure. Not sure why people think this is hard.
3) Purchase a third party cert and load it into your i and use that to
secure Telnet.
4) use SSH port tunneling with say putty on port 22 and let that encrypt
your traffic.
5) Use a VPN
6) Something else that I didn't consider. The possibilities are endless.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 1/29/2016 11:24 AM, Aaron Bartell wrote:

*This message was transferred with a trial version of CommuniGate(r) Pro*

Does anyone know if you can configure telnet on IBM i to use certs created
by openssl commands? Trying to automate telnet SSL configuration with a
shell script (and at the same time move away from DCM).

Aaron Bartell
litmis.com - Services for open source on IBM i

--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.