Re: Connecting to web using TLS

[Bradley Stone <bvstone@xxxxxxxxx>]

Alan,

What error codes are you receiving.

You do need to load the CA chain for most applications when you're the
client.  IBM doesn't automatically put anything but the most basic in the
*SYSTEM store when it's created.

Brad
www.bvstools.com

On Thu, Oct 27, 2016 at 1:51 PM, Alan Shore <ashore@xxxxxxxx> wrote:

> Thanks for your reply Peter
> We are using Krengel Tech RPG-XML Suite and have had no problems with web
> service calls what so ever
> For this new company, I have created a proof of concept program (read -
> quick, with no bells and whistles) and I seem to be connecting, but the
> error code that I am receiving says that I need to load a certificate onto
> the AS/400
> However - they say I don't need to load a certificate but to use TLS
> protocol
>
> quote
> When we receive a request, we check the level of encryption. We allow
> merchants to connect to us only in secure https mode using TLS protocols
> and we strongly recommend to use the most recent and secure versions which
> are currently TLS 1.1 and 1.2.
> Endquote
>
> We followed the instructions from the web site I included below - stopped
> and started all the INBNDSRVR jobs - but still receive the same error code
>
> Alan Shore
> E-mail : ASHORE@xxxxxxxx
> Phone [O] : (631) 200-5019
> Phone [C] : (631) 880-8640
> 'If you're going through hell, keep going.'
> Winston Churchill
>
>
> -----Original Message-----
> From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
> Peter Connell
> Sent: Thursday, October 27, 2016 2:39 PM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> Subject: RE: Connecting to web using TLS
>
> Alan,
>
> We've been having trouble with web service calls to some data providers
> who now support only TLS protocols.
> My impression is that there appear to be issues with the limited number of
> cipher suites supported by IBM i5 so a successful handshake using IBM
> legacy or GSK APIs may depend on the ciphers that the provider supports but
> I'm not certain of this.
> I've found that using a simple java program (complied at JDK7) to do the
> actual connection works fine since JDK70 supports a wider range of ciphers.
> Connecting using curl via a PHP script also seems to work.
>
> Cheers, Peter
>
> -----Original Message-----
> From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
> Alan Shore
> Sent: Friday, 28 October 2016 6:55 AM
> To: midrange-l@xxxxxxxxxxxx
> Subject: Connecting to web using TLS
>
> Hi everyone
> Before I forget, we are on V7r1 (finally) I have been asked to place web
> service calls but need to use TLS protocols - Quote When we receive a
> request, we check the level of encryption. We allow merchants to connect to
> us only in secure https mode using TLS protocols and we strongly recommend
> to use the most recent and secure versions which are currently TLS 1.1 and
> 1.2.
>
> endquote
>
> I have searched the web, and the only thing I can find is the following
> web page
>
> http://www-01.ibm.com/support/docview.wss?uid=nas8N1019971
>
> Does anyone have any other instructions?
> Just trying to cover all  bases
>
>
>
> Alan Shore
> E-mail : ASHORE@xxxxxxxx
> Phone [O] : (631) 200-5019
> Phone [C] : (631) 880-8640
> 'If you're going through hell, keep going.'
> Winston Churchill
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
> moment to review the archives at http://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
>
> ##############################################################
> This correspondence is for the named person's use only. It may contain
> confidential or legally privileged information, or both. No confidentiality
> or privilege is waived or lost by any mistransmission. If you receive this
> correspondence in error, please immediately delete it from your system and
> notify the sender. You must not disclose, copy or rely on any part of this
> correspondence if you are not the intended recipient. Any views expressed
> in this message are those of the individual sender, except where the sender
> expressly, and with authority, states them to be the views of Veda. If you
> need assistance, please contact Veda :- Australia http://www.veda.com.au/
> contact-us New Zealand http://www.veda.co.nz/contact-veda
> ##############################################################
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
> moment to review the archives at http://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.