Re: Install FedEx Certificate -- MIDRANGE-L

It sounds like you just need to install their CAs.

You will need to first export the CAs from the certificates and import then
top down (the last one in the chain is the actual certificate. You will
not install that).

This may help:
https://docs.bvstools.com/home/ssl-documentation

I also know that HTTPAPI you can turn off strict SSL so you don't need to
import the CAs. That's the route I would choose.

If they require you to import a client certificate (which is NOT a CA) then
you will need to first import the CAs from the client certificate into the
CA Store using DCM, then the client certificate. Same things apply as how
to do that listed in the link above (export the CAs from the cert, import
them into DCM).

Brad
www.bvstools.com

On Wed, Sep 30, 2020 at 11:13 AM (WalzCraft) Jerry Forss <
JForss@xxxxxxxxxxxxx> wrote:

The calls to the different services is being done all from the IBMi via
RPG and HTTPAPI.

This is what I downloaded so far.

wsbeta.fedex.com:
1 - wsbeta.fedex.com.p7c - The PKCS #7 format (recommended for Microsoft
IIS), this format includes the Intermediate CA.
2 - wsbeta.fedex.com.pem - The X.509 format. This format does not include
the Intermediate CA.
3 - wsbeta-intermediate.pem - The Intermediate CA certificate.
4 - wsbeta.fedex.com.der - Binary form of certificate, typically used with
Java Platforms.
5 - wsbeta-intermedate.der - Binary form of Intermediate CA certificate,
typically used with Java Platforms.

ws.fedex.com:
1 - ws.fedex.com.p7c - The PKCS #7 format (recommended for Microsoft IIS),
this format includes the Intermediate CA.
2 - ws.fedex.com.pem - The X.509 format. This format does not include the
Intermediate CA.
3 - ws-intermediate.pem - The Intermediate CA certificate.
4 - ws.fedex.com.der - Binary form of certificate, typically used with
Java Platforms.
5 - ws-intermedate.der - Binary form of Intermediate CA certificate,
typically used with Java Platforms.

The same CA Root applies to wsbeta and ws.fedex.com.
The Root certificate, in most cases, is not required for the installation
with the SSL certificate. It is provided here for the rare instances where
the server does require the Root certificate to be installed together with
the SSL and Intermediate certificates, or for server/client to server
communication where the trusted Root certificates have not been
pre-installed on the server/client side. Providing in pem format.
6 - DigiCertGlobalRoot.pem - CA ROOT

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Jack Woehr
Sent: Wednesday, September 30, 2020 11:03 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Install FedEx Certificate

Server cert or client cert?
Probably a client cert
Follow instruction in various DCIM app notes for installing a client cert

On Wed, Sep 30, 2020 at 9:56 AM (WalzCraft) Jerry Forss <
JForss@xxxxxxxxxxxxx> wrote:

Hi All,

I am trying to get connected to the FedEx Web Service.

They said I need to load a certificate.

I downloaded it, I think, to my downloads folder.
DigiCertGlobalRoot.pem How do I get that uploaded to the IBMi?

--
Jack Woehr
Absolute Performance, Inc.
12303 Airport Way, Suite 100
Broomfield, CO 80021

NON-DISCLOSURE NOTICE: This communication including any and all
attachments is for the intended recipient(s) only and may contain
confidential and privileged information. If you are not the intended
recipient of this communication, any disclosure, copying further
distribution or use of this communication is prohibited. If you received
this communication in error, please contact the sender and delete/destroy
all copies of this communication immediately.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

Subject to Change Notice:

WalzCraft reserves the right to improve designs, and to change
specifications without notice.

Confidentiality Notice:

This message and any attachments may contain confidential and privileged
information that is protected by law. The information contained herein is
transmitted for the sole use of the intended recipient(s) and should "only"
pertain to "WalzCraft" company matters. If you are not the intended
recipient or designated agent of the recipient of such information, you are
hereby notified that any use, dissemination, copying or retention of this
email or the information contained herein is strictly prohibited and may
subject you to penalties under federal and/or state law. If you received
this email in error, please notify the sender immediately and permanently
delete this email. Thank You

WalzCraft PO Box 1748 La Crosse, WI, 54602-1748
www.walzcraft.com<http://www.walzcraft.com> Phone: 1-800-237-1326
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com