Re: FTP SSL problem -- MIDRANGE-L

My apologies - we do have 5722AC3 - 128 bit  . . . I will check our CUME 
level . . .

Steve

"Wayne McAlpine" 
<wayne.mcalpine@xxxxxxxxxxxxxxxxx> wrote in 
message news:e13i8r$ra8$1@xxxxxxxxxxxxxxxx
> I'm not absolutely certain, but I think that the only supported program
> is now the 128-bit encryption, 5722-AC3.  5722-AC1 is the 40-bit product
> that was intended only for export.  There is a new version of 5722-AC3
> for V5R3 and there are some PTF's for this licensed program as well.
> If you install the cume package, they should be applied.
>
> Steve McKay wrote:
>> Brad -
>>
>> Was this PTF SI17486 for 5722TC1?  If so, I already have it applied.
>>
>> Curiously, when I click on 'Digital Certificate Manager' from the HTTP 
>> admin
>> page, I get the message "You must install one of the cryptographic access
>> provider products on your system before using the Digital Certificate
>> Manager (DCM) functions." even though I have 57222AC1 installed (with 
>> status
>> INSTALLED for release V5R2M0).
>>
>> Do you think I should delete 5722AC1 and re-install?
>>
>> Thanks,
>>
>> Steve
>>
>> "Brad Stone" <brad@xxxxxxxxxxxx> wrote in 
>> message
>> news:web-2119807@xxxxxxxxxxxxxx
>>
>>>Fov V5R2 there is also a PTF that is needed (can't remember
>>>which one) because the FTP client didn't work well with SSL
>>>client authentication when the server returned a specific
>>>code.  (I worked with IBM to get it fixed, although this
>>>was with my GETURI APP, not the FTP client, but same
>>>thing...)
>>>
>>>The PTF should be a SSL PTF.
>>>
>>>This was a while ago.. sorry I don't have the exact PTF.
>>>If you need it, contact me offline and I can try to find
>>>it.
>>>
>>>But this only applies if you are using client
>>>authentication, not "plain jane SSL".
>>>
>>>Brad
>>>www.bvstools.com
>>>
>>>On Mon, 3 Apr 2006 10:41:05 -0500
>>>"Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>
>>>wrote:
>>>
>>>>Steve, you've done much of what you need to do.  You just
>>>>have to assign the
>>>>certificate to the FTP server.  The following is the V5R4
>>>>page for doing
>>>>this.
>>>>
>>>>
>>>
>>>http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/rzaiq/rzaiqsslpa
>>>
>>>>rent.htm
>>>>
>>>>Joe
>>>>
>>>>
>>>>>From: Steve McKay
>>>>>
>>>>>I am trying to do FTP SSL - FTP RMTSYS(ABC.COM)
>>>>
>>>>PORT(20021) SECCNN(*SSL)
>>>>
>>>>>command - and am receiving the message "Secure
>>>>
>>>>connection error, return
>>>>
>>>>>code -93".  -93 indicates "SSL is not available for
>>>>
>>>>use".
>>>>
>>>>>I have 5722SS1 option 34 (Digital Certificate Manager)
>>>>
>>>>and 5722AC3 (Crypto
>>>>
>>>>>Access Provider 128-bit for AS/400) installed.
>>>>>
>>>>>What am I missing?
>>>>
>>>>
>>>>-- 
>>>>This is the Midrange Systems Technical Discussion
>>>>(MIDRANGE-L) mailing list
>>>>To post a message email:
>>>>MIDRANGE-L@xxxxxxxxxxxx
>>>>To subscribe, unsubscribe, or change list options,
>>>>visit:
>>>>http://lists.midrange.com/mailman/listinfo/midrange-l
>>>>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>>>>Before posting, please take a moment to review the
>>>>archives
>>>>at http://archive.midrange.com/midrange-l.
>>>>
>>>
>>>Bradley V. Stone
>>>BVS.Tools
>>>www.bvstools.com
>>>-- 
>>>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
>>>list
>>>To post a message email:
>>>MIDRANGE-L@xxxxxxxxxxxx
>>>To subscribe, unsubscribe, or change list options,
>>>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>>>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>>>Before posting, please take a moment to review the archives
>>>at http://archive.midrange.com/midrange-l.
>>>
>>>
>>
>>
>>
>>
>
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list
> To post a message email: 
> MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>