Re: DCM

You should be able to export the CAs from the certificate they sent you.

https://docs.bvstools.com/home/ssl-documentation/exporting-certificate-authorities-cas-from-a-website


You'll want to skip past the part about retrieving the certificate to do
so.


Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #5 <https://www.bvstools.com/mailtool.html>: Easy setup!
No confusing or obscure setup instructions, directory entries, SMTP users,
aliases or host tables. All you need is TCPIP, a connection to the internet
and you're done!

On Tue, Jul 23, 2019 at 1:00 PM Christopher Bipes <
chris.bipes@xxxxxxxxxxxxxxx> wrote:

Here is one for the archives;

I have a third party that has given me a certificate to use to identify
our servers to them when posting transactions. Hey, done this before. But
this company will NOT pass on the issuing CA's public certificate in the
chain and I have no way to get it since it is their own private CA issuing
the certificate. So I attempted to import the certificate and get an error
that the CA is not known or trusted. (To be expected.)

I open a PMR with IBM to see if they have a workaround. Well the answer
is NO. Then I get an explanation of why IBM will not allow it which I
totally agree with.

Worst part is friggin Windows does not care about the CA and will let you
import the certificate public and private key. So from my windows system,
I can communicate with them but not from my iSeries.

I have not been able to get the third party to change their way. So I
thought I would invite you all to my rabbit hole to see if anyone more
devious than myself has found a way to shoe horn a certificate into DCM
certificate store and use with an application to identify oneself to a
stupid third party.

Chris Bipes
Director of Information Services
CrossCheck, Inc.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com