Re: openssl for telnet on IBM i?

[Aaron Bartell <aaronbartell@xxxxxxxxx>]

Hi Chris,

> No matter where you get your Certificate from, you will have to use DCM to
upload the CA and the Certificate.  The use DCM to tell your telnet server
what server to use.  Cannot get away from DCM completely.

I believe it can be automated.  For example, here's one of the APIs:
http://bit.ly/ibmi-QykmImportKeyStore  I was hoping somebody had already
done some work on this front to script it out.


Aaron Bartell
litmis.com - Services for open source on IBM i


On Fri, Jan 29, 2016 at 12:25 PM, Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>
wrote:

> No matter where you get your Certificate from, you will have to use DCM to
> upload the CA and the Certificate.  The use DCM to tell your telnet server
> what server to use.  Cannot get away from DCM completely.  DCM is
> equivalent to certificates.msc on a windows system.  It is how you manage
> certificate and assign to applications on an iSeries.
>
> Chris Bipes
> Director of Information Services
> CrossCheck, Inc.
>
> -----Original Message-----
> From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
> Aaron Bartell
> Sent: Friday, January 29, 2016 8:25 AM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> Subject: openssl for telnet on IBM i?
>
> Does anyone know if you can configure telnet on IBM i to use certs created
> by openssl commands?  Trying to automate telnet SSL configuration with a
> shell script (and at the same time move away from DCM).
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.