Re: Email sending problem

I've got instructions for that (and a lot of other SSL stuff) here as well:

https://docs.bvstools.com/home/ssl-documentation/creating-the-system-store

But on V6 those CAs will probably not be even close to matching what GMail
is using... Back then with my customers I hading to get the specific CAs
from Google/MS and send them to my customers with instructions on how to
import them into the *SYSTEM store (a lot of them just had me do it). That
was before we could ignore the "RC(23) Not trusted" errors. And when they
would update cert every year which in most cases meant renewing CAs as well.

And even O365 isn't allowing any SSL/TLS communication lower than TLS
v1.1. GMail may be similar. I don't think V6 had TLS.. maybe 1.0? I deal
with V7R1 customers who don't even have 1.1 set up.

On a V6 box your best option is to set up a relay, most likely.

On Mon, Oct 24, 2022 at 6:19 AM Rob Berendt <rob@xxxxxxxxx> wrote:

James,
I noticed your thread at the IBM i Community.
I want to say that IBM ships a bunch of certs on the system. They're just
not populated into the CA Store. Follow these simple steps:

Go into New Navigator.
Bookmarks
IBM Digital Certificate Manager for i
Open or Create the *SYSTEM store
"Populate with CAs"
Simple as pie!

Here's where I first ran into this:

https://www.linkedin.com/feed/update/urn:li:activity:6920461817680990208?utm_source=share&utm_medium=member_desktop

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
James H. H. Lampert via MIDRANGE-L
Sent: Friday, October 14, 2022 4:40 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Cc: James H. H. Lampert <jamesl@xxxxxxxxxxxxxxxxx>
Subject: Email sending problem

CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know
the content is safe.


We currently have applications on our V6 box (most notably, the back-end
of our self-service license authorization code webapp) that send email
using QtmmSendMail. Our V6 box is set up with MAILROUTER(*NONE), and I'm
pretty sure I did something with DMARC setup, over a year ago (and I
don't remember what I did, or how).

And we're moving an application with email capability over to a cloud
V7R5 box (the same one that's been giving me problems with TLS for
iNav), on which SMTP is not set up *at all.*

Our email provider is GMail. For years, List members have been telling
me that MAILROUTER(*NONE) is a bad idea, but there wasn't much I could
do about it from a V6 box.

What do I need to do, and where can I learn how to do it?

--
JHHL
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com