RE: DCM SSL sha1 / sha256 cert issues -- MIDRANGE-L

Brad,
Yes, I just thought I'd piggy back on the thread without de-railing it. I remembered that Scott wrote a UNIXCMD thing. I'm just googling stuff on connecting via OpenSSL now.
Peter

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Bradley Stone
Sent: Saturday, 3 December 2016 9:48 AM
To: Midrange Systems Technical Discussion
Subject: Re: DCM SSL sha1 / sha256 cert issues

Peter,

I believe Scott meant you could use OpenSSL to grab the certificate from a server and then with that tell what kinds it is.

We have something similar in our SSL documentation here:
http://docs.bvstools.com/home/ssl-documentation/openssl

Adding an openSSL hook to HTTPAPI and/or our GETURI product is also something that's been on my todo list for a while as I'm just not satisfied with the APIs much any more. I mean it's ok, but using openSSL would sure be a nice addition. I had to do the same thing with email years ago and one of my most used products was created. :)

Brad
www.bvstools.com

On Fri, Dec 2, 2016 at 2:21 PM, Peter Connell <Peter.Connell@xxxxxxxxxx>
wrote:

Hi Scott,
Could you point me at some material so that I might try writing a
program that connects to a 3rd part server via OpenSSL as an
alternative to HTTPAPI ?
Peter

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Scott Klement
Sent: Friday, 2 December 2016 6:23 PM
To: Midrange Systems Technical Discussion
Subject: Re: DCM SSL sha1 / sha256 cert issues

Paul,

For server-type applications, you could connect with the openssl
command-line client. It can tell you all sorts of info about the
certs that it receives.

The same tool can be used to analyze a certificate from a file (on
your PC or the IFS, etc). You'd probably have to export it from the
DCM, but you could use this to find out whether it uses SHA256

You could also use it to connect to various services (Central,
Database, et al) to see what they're running.

Just a thought.

On 12/1/2016 1:24 PM, Steinmetz, Paul wrote:

1) Within DCM, is there a method to see if a cert is SHA1 or SHA256?
I'm not seeing the sha details anywhere.

2) I need a tool or method to determine which cert is being used by
a

non HTTP SSL job/process.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

##############################################################
This correspondence is for the named person's use only. It may contain
confidential or legally privileged information, or both. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this correspondence in error, please immediately delete
it from your system and notify the sender. You must not disclose, copy
or rely on any part of this correspondence if you are not the intended
recipient. Any views expressed in this message are those of the
individual sender, except where the sender expressly, and with
authority, states them to be the views of Veda. If you need
assistance, please contact Veda :- Australia
http://www.veda.com.au/contact-us New Zealand
http://www.veda.co.nz/contact-veda
##############################################################

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

##############################################################
This correspondence is for the named person's use only. It may contain confidential or legally privileged information, or both. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and
notify the sender. You must not disclose, copy or rely on any part of this correspondence if you are not the intended recipient. Any views expressed in this message are those of the individual sender, except where the sender expressly, and with authority, states them to be the views of Veda. If you need assistance, please contact Veda :-
Australia http://www.veda.com.au/contact-us
New Zealand http://www.veda.co.nz/contact-veda
##############################################################