Re: [IBMiOSS] SSL error trying to install open source environment

That appears to have solved it. That added a couple of Digicert CA's and
now the install appears to be running.

I see that they CA's were added to the ACS Key Database file. So if I
understand right, those are for the public.dhe.ibm.com ssl certificates
which I assume is where the open source environment install files are
located?

Thanks,

Matt Hopkins
Project Leader
PDP Group, Inc.
10909 McCormick Road
Hunt Valley, MD 21031
Office: 410.584.0330
Fax: 410-584-0336
Cell: 410.258.8845
MWHopkins@xxxxxxxxxxxxxxx
www.pdpgroupinc.com

Confidentiality Notice: This email message is intended only for the
individual or entity to which it is addressed. This email may contain
information that is proprietary or privileged, confidential and exempt
from disclosure under applicable law. If you are not the intended
recipient, you are hereby notified that any dissemination, distribution or
copying of this communication is strictly prohibited. If you received this
email by accident, please notify the sender immediately and destroy this
email and all copies of it.




From: "Jesse Gorzinski" <jgorzins@xxxxxxxxxx>
To: "IBMi Open Source Roundtable" <opensource@xxxxxxxxxxxxxxxxxx>
Date: 07/15/2020 12:58 PM
Subject: Re: [IBMiOSS] SSL error trying to install open source
environment
Sent by: "OpenSource" <opensource-bounces@xxxxxxxxxxxxxxxxxx>



This error message is misleading and incorrect. This means your Java
installation does not trust the SSL certificate offered by the IBM
download site.
Usually this indicates some form of restrictive PC configuration or a JRE
installation error.
Running ACS from the command line to verify the connection should give you

the option of trusting the cert, like so:
java -jar acsbundle.jar /plugin=ping /system=public.dhe.ibm.com /ports=443

/ssl=1 /serverauth=1


"OpenSource" <opensource-bounces@xxxxxxxxxxxxxxxxxx> wrote on 07/15/2020
11:15:03 AM:

From: MWHopkins@xxxxxxxxxxxxxxx
To: opensource@xxxxxxxxxxxxxxxxxx
Date: 07/15/2020 11:15 AM
Subject: [EXTERNAL] [IBMiOSS] SSL error trying to install open
source environment
Sent by: "OpenSource" <opensource-bounces@xxxxxxxxxxxxxxxxxx>

I am trying to get the open source environment set up on our IBM i

(V7.3)

I go into the Open Source Package Management in IBM i Access, enter my
user & password and I get the message that the OS environment is not
installed and would I like to install it. I click yes. Then it thinks

for

a second and returns error message "MSGSSL002 - The IBM i server
application is not trusted for secure sockets connections"

My system verify gets 'success' on all the tests. I have downloaded the
SSL certificates from DCM and imported them into my key ring on the MAC
and set them to 'Trust all'. I just can't figure out why it is saying it

is not trusted.

Has anyone come across this issue?

Thanks,

Matt Hopkins
Project Leader
PDP Group, Inc.
10909 McCormick Road
Hunt Valley, MD 21031
Office: 410.584.0330
Fax: 410-584-0336
Cell: 410.258.8845
MWHopkins@xxxxxxxxxxxxxxx
www.pdpgroupinc.com