Re: FTP SSL problem

[Wayne McAlpine <wayne.mcalpine@xxxxxxxxxxxxxxxxx>]

I'm not absolutely certain, but I think that the only supported program 
is now the 128-bit encryption, 5722-AC3.  5722-AC1 is the 40-bit product 
that was intended only for export.  There is a new version of 5722-AC3 
for V5R3 and there are some PTF's for this licensed program as well. 
If you install the cume package, they should be applied.

Steve McKay wrote:
> Brad -
>
> Was this PTF SI17486 for 5722TC1?  If so, I already have it applied.
>
> Curiously, when I click on 'Digital Certificate Manager' from the HTTP admin 
> page, I get the message "You must install one of the cryptographic access 
> provider products on your system before using the Digital Certificate 
> Manager (DCM) functions." even though I have 57222AC1 installed (with status 
> INSTALLED for release V5R2M0).
>
> Do you think I should delete 5722AC1 and re-install?
>
> Thanks,
>
> Steve
>
> "Brad Stone" <brad@xxxxxxxxxxxx> wrote in message 
> news:web-2119807@xxxxxxxxxxxxxx
>
> > Fov V5R2 there is also a PTF that is needed (can't remember
> > which one) because the FTP client didn't work well with SSL
> > client authentication when the server returned a specific
> > code.  (I worked with IBM to get it fixed, although this
> > was with my GETURI APP, not the FTP client, but same
> > thing...)
> >
> > The PTF should be a SSL PTF.
> >
> > This was a while ago.. sorry I don't have the exact PTF.
> > If you need it, contact me offline and I can try to find
> > it.
> >
> > But this only applies if you are using client
> > authentication, not "plain jane SSL".
> >
> > Brad
> > www.bvstools.com
> >
> > On Mon, 3 Apr 2006 10:41:05 -0500
> > "Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx> 
> > wrote:
> >
> > > Steve, you've done much of what you need to do.  You just
> > > have to assign the
> > > certificate to the FTP server.  The following is the V5R4
> > > page for doing
> > > this.
> >
> > http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/rzaiq/rzaiqsslpa
> >
> > > rent.htm
> > >
> > > Joe
> > >
> > >
> > > > From: Steve McKay
> > > >
> > > > I am trying to do FTP SSL - FTP RMTSYS(ABC.COM)
> > >
> > > PORT(20021) SECCNN(*SSL)
> > >
> > > > command - and am receiving the message "Secure
> > >
> > > connection error, return
> > >
> > > > code -93".  -93 indicates "SSL is not available for
> > >
> > > use".
> > >
> > > > I have 5722SS1 option 34 (Digital Certificate Manager)
> > >
> > > and 5722AC3 (Crypto
> > >
> > > > Access Provider 128-bit for AS/400) installed.
> > > >
> > > > What am I missing?
> > >
> > >
> > > --
> > > This is the Midrange Systems Technical Discussion
> > > (MIDRANGE-L) mailing list
> > > To post a message email: 
> > > MIDRANGE-L@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit:
> > > http://lists.midrange.com/mailman/listinfo/midrange-l
> > > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the
> > > archives
> > > at http://archive.midrange.com/midrange-l.
> >
> > Bradley V. Stone
> > BVS.Tools
> > www.bvstools.com
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> > list
> > To post a message email: 
> > MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.