Re: Self-Signed Certificates

[Bradley Stone <bvstone@xxxxxxxxx>]

Just to note, that process isn't complete.

You have to make a request first using DCM that you give to the certificate
provider.  Then when you get it you import it.

It won't let you import a certificate without a request.

Also, you may need to import the CA(s) used by the certificate into your
*SYSTEM store first as well.

So the sequence is more like this:

1.  Create a server certificate request using DCM
2.  Give that to your Certificate source (they will ask for it).
3.  Import the certificate.  Possibly importing the CAs used by the
certificate first if required.


On Fri, Dec 20, 2013 at 2:06 PM, Rich Loeber <rich@xxxxxxxxx> wrote:

>    Perfect!
>
>    Thanks.  This makes my day.
>
>    Hope you have a wonderful Christmas celebration!
>
>    Rich
>
>
>  --------------------------------------------------------------------------
>
>    On 12/20/2013 3:01 PM, Aaron Bartell wrote:
>
>  This is pretty good:
>  [1]
> http://itquestions.com/questions/1155/how-to-install-a-digital-certificate-on-the-iserie.html
>
>  Aaron Bartell
>
>
>  On Fri, Dec 20, 2013 at 1:51 PM, Rich Loeber [2]<rich@xxxxxxxxx> wrote:
>
>
>     Thanks Aaron .... is the installation process on the IBM i straight
>     forward?
>
>     Rich
>
>
>
> --------------------------------------------------------------------------
>
>     On 12/20/2013 2:49 PM, Aaron Bartell wrote:
>
>   There are very inexpensive trusted certificates you can buy.  I've bought
>   comodo in the past.
>
>   [1][3]https://comodosslstore.com/
>
>   Aaron Bartell
>
>
>   On Fri, Dec 20, 2013 at 1:46 PM, Rich Loeber [2][4]<rich@xxxxxxxxx>
> wrote:
>
>
>      I'm using an Apache server instance with HTTPS for an application
>      locally.  I have secured it with a self-signed certificate that I
>   created
>      using DCM.  The process works OK, but the first time a user logs into
>   the
>      site (we use FireFox here), they get a security warning that the
>      certificate is not from a trusted source.  I know where the
> certificate
>      came from, so I'm OK with this, but there are some users who get very
>      nervous when they see this exception message.
>
>      Is there any way around this issue without having to spend money on a
>      "trusted" certificate?
>
>      Rich Loeber - @richloeber
>      Kisco Information Systems
>      [1][3][5]http://www.kisco.com
>
>   References
>
>      Visible links
>      1. [4][6]http://www.kisco.com/
>   --
>   This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>   list
>   To post a message email: [[7]5]WEB400@xxxxxxxxxxxx
>   To subscribe, unsubscribe, or change list options,
>   visit: [6][8]http://lists.midrange.com/mailman/listinfo/web400
>   or email: [[9]7]WEB400-request@xxxxxxxxxxxx
>   Before posting, please take a moment to review the archives
>   at [8][10]http://archive.midrange.com/web400.
>
>  References
>
>     Visible links
>     1. [11]https://comodosslstore.com/
>     2. [12]mailto:rich@xxxxxxxxx
>     3. [13]http://www.kisco.com/
>     4. [14]http://www.kisco.com/
>     5. [15]mailto:WEB400@xxxxxxxxxxxx
>     6. [16]http://lists.midrange.com/mailman/listinfo/web400
>     7. [17]mailto:WEB400-request@xxxxxxxxxxxx
>     8. [18]http://archive.midrange.com/web400
>  --
>  This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>  list
>  To post a message email: [19]WEB400@xxxxxxxxxxxx
>  To subscribe, unsubscribe, or change list options,
>  visit: [20]http://lists.midrange.com/mailman/listinfo/web400
>  or email: [21]WEB400-request@xxxxxxxxxxxx
>  Before posting, please take a moment to review the archives
>  at [22]http://archive.midrange.com/web400.
>
> References
>
>    Visible links
>    1.
> http://itquestions.com/questions/1155/how-to-install-a-digital-certificate-on-the-iserie.html
>    2. mailto:rich@xxxxxxxxx
>    3. https://comodosslstore.com/
>    4. mailto:rich@xxxxxxxxx
>    5. http://www.kisco.com/
>    6. http://www.kisco.com/
>    7. mailto:5]WEB400@xxxxxxxxxxxx
>    8. http://lists.midrange.com/mailman/listinfo/web400
>    9. mailto:7]WEB400-request@xxxxxxxxxxxx
>   10. http://archive.midrange.com/web400
>   11. https://comodosslstore.com/
>   12. mailto:rich@xxxxxxxxx
>   13. http://www.kisco.com/
>   14. http://www.kisco.com/
>   15. mailto:WEB400@xxxxxxxxxxxx
>   16. http://lists.midrange.com/mailman/listinfo/web400
>   17. mailto:WEB400-request@xxxxxxxxxxxx
>   18. http://archive.midrange.com/web400
>   19. mailto:WEB400@xxxxxxxxxxxx
>   20. http://lists.midrange.com/mailman/listinfo/web400
>   21. mailto:WEB400-request@xxxxxxxxxxxx
>   22. http://archive.midrange.com/web400
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.