Re: Can anyone help me with getting a secure connection from a LINUX system to the IBMi

Le 23/12/2023 à 19:32, Richard Schoen a écrit :

If you have a tunnel open for the IBM ACS SSL ports and SSL is set up, here's a Linux tip. I ran into issues with it recently.

https://github.com/richardschoen/howtostuff/blob/master/ibmi_acs_odbcssl_linux_issue.md

Indeed, it worked for me from a CentOS VM hosted by Windows 11 to pub400.com server.

I just had to install the iACS Linux package, configure a DSN in my .odbc.ini owned file (example here https://www.ibm.com/support/pages/ibm-iaccess-linux-odbc-configuration), and run isql command against the DSN. At a first test, it worked as expected with SSL=0 in the DSN. Then it worked like a charm with SSL=1 in the DSN, and connected using tls. I could confirm it with netstat and in QZDASSINIT joblog. I did not need to install any CA certificates as those of pub400.com certificate were probably already installed.

Otherwise a VPN or SSH connection would be usable I imagine.

Regards,
Richard Schoen
Web: http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx

----------------------------------------------------------------------

message: 1
date: Fri, 22 Dec 2023 14:10:22 -0500
from: a4g atl <a4ginatl2@xxxxxxxxx>
subject: Re: Can anyone help me with getting a secure connection from
a LINUX system to the IBMI?

On Fri, Dec 22, 2023 at 12:53?PM Marc Rauzier <marc.rauzier@xxxxxxxxx>
wrote:

Le 22/12/2023 ? 18:12, a4g atl a ?crit :

We have a remote developer that is using Linux for their hardware.

We tried the IBM ACS ODBC for Linux but he has problems getting the

secure

connection. I have a trusted CA and assigned it to the host servers
and telnet.

Any suggestions would be appreciated.

This is an old document so I cannot say if it is still valid, but I
can read that there is a restriction which prevents configuring an ssl
connection.

Restriction: Sockets Layer (SSL) component
Reason: The SSL component is not needed or shipped with the Linux
driver. Use a common SSL tunnel or Socks server instead.

IBM i Access Client Solutions Linux Application Package - Installation
and usage guide, page 14

ftp://ftp.software.ibm.com/as400/products/clientaccess/solutions/IBMiA
CS_LinuxAppPkg_Install_Usage_Guide.pdf

So, as others write, you may want to set up an ssh tunnel.