Re: FTP SSL problem

["Steve McKay" <mckays@xxxxxxxxxxx>]

Amazing - how do you find this stuff?

Any way, I went to the web site and CALLed the program.  I was then able to 
get into the certificate store *AND* the results of my FTP attempt changed 
from "Secure connection error, return code -93" to "Secure connection error, 
return code -23" with -23 indicating "Certificate is not signed by a trusted 
certificate authority".

I believe the site to which I am attempting to connect uses a Verisign 
certificate.  The only Verisign certificate in my certificate store appears 
to be expired (validity period 2/3/98 - 3/4/03).  I have asked my contact to 
send me a copy of the certificate which they are using.  My intent is to 
copy that certificate into my *SYSTEM CA.

Am I on the right track?

BTW - contrary to my previous post, we have 5722AC3 installed (not 5722AC1) 
. . .

Thanks,

Steve

"Scott Klement" <midrange-l@xxxxxxxxxxxxxxxx> wrote 
in message news:20060406130052.X50234@xxxxxxxxxxxxxxxxxxxx
>
>> Curiously, when I click on 'Digital Certificate Manager' from the HTTP 
>> admin
>> page, I get the message "You must install one of the cryptographic access
>> provider products on your system before using the Digital Certificate
>> Manager (DCM) functions." even though I have 57222AC1 installed (with 
>> status
>> INSTALLED for release V5R2M0).
>
> There's an IBM web site that explains how to fix this error.
>
> http://www-912.ibm.com/s_dir/slkbase.NSF/0/0840592a8890df6f86256820005d7b43?OpenDocument
>
> or, here's a shorter link to the same page if you prefer:
>
> http://tinyurl.com/l7kbh
>
>>
>> Do you think I should delete 5722AC1 and re-install?
>>
>
> No.  In fact, you should be using 5722-AC3.  AC1 is no longer available.
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list
> To post a message email: 
> MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>