RE: openssl for telnet on IBM i?

We also have a problem getting SSL to work the new IBM Access Client Solutions. Secure telnet works OK with Client Access but does not work with Access Client. After much time on with IBM support it was tracked back to an old root certificate from Symantec. But putting on the newer Symantec root certificate broke older version of Client Access. We are fixing that now. Check any root certificates you might have and see if they are current

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Aaron Bartell
Sent: Friday, January 29, 2016 1:38 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: openssl for telnet on IBM i?

Hi Larry,

2) Create a self-signed cert in DCM and assign it to Telnet. Then use
Port

992 and you are secure. Not sure why people think this is hard.

I've yet to find docs that take you through the 30 steps from start to finish. In my current scenario I have SSL working with telnet but it only works for tn5250j and not IBM Access Client Solutions. I prefer ACS (because keyboard shortcuts actually work on the Mac) but intend to give up on it again. Here's the error I am getting:
http://www.screencast.com/t/NyYmuVCggldg



Aaron Bartell
litmis.com - Services for open source on IBM i


On Fri, Jan 29, 2016 at 12:15 PM, DrFranken <midrange@xxxxxxxxxxxx> wrote:

As I see it you have these options:

1) Open Telnet on 23 from the world. Not such a good choice.
2) Create a self-signed cert in DCM and assign it to Telnet. Then use
Port
992 and you are secure. Not sure why people think this is hard.
3) Purchase a third party cert and load it into your i and use that to
secure Telnet.
4) use SSH port tunneling with say putty on port 22 and let that
encrypt your traffic.
5) Use a VPN
6) Something else that I didn't consider. The possibilities are endless.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 1/29/2016 11:24 AM, Aaron Bartell wrote:

*This message was transferred with a trial version of CommuniGate(r)
Pro*

Does anyone know if you can configure telnet on IBM i to use certs
created by openssl commands? Trying to automate telnet SSL
configuration with a shell script (and at the same time move away from DCM).

Aaron Bartell
litmis.com - Services for open source on IBM i

--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.