Re: SOLVED, Re: Secured Telnet from one Midrange box to another

Le 06/04/2023 à 03:14, Patrik Schindler a écrit :

Hmm. Doesn't IBM provide a system-wide installed collection of common root-CA certificates, like modern browsers have integrated nowadays?

I think it was the case until V7R2.

When V7R3 was released, IBM changed the behavior. Look at the Memo to users for V7R3 and DCM: https://www.ibm.com/docs/en/i/7.3?topic=options-digital-certificate-manager-5770-ss1-option-34

--- quote ---

When creating a certificate store using Digital Certificate Manager in IBM® i 7.3, the default list of Root Certificate Authority (CA) certificates no longer get automatically added to the certificate store. To add CA Root certificates to a newly created certificate store, select “Manage Certificate Store” from the left side pane and then select the option to “Populate with CA certificates”.

The “Populate with CA certificates” panel allows you to select the CA Root and Intermediate certificates you trust to be added to the certificate store by placing a checkbox next to the desired certificates and then clicking on the “Continue” button. The certificates which are listed include secure versions using Secure Hash Algorithm (SHA-2) signature algorithms with an RSA key size of 2048 bits or greater or an ECDSA key size of 256 bit or greater.

--- quote ---