RE: FTP-SSL from Client Side

["Chris Bipes" <chris.bipes@xxxxxxxxxxxxxxx>]

It really depends on the Secure FTP client.  Some will prompt when the
certificate is not in the local store, some will automatically accept
the certificate, even if it cannot verify to a root.  Other will drop
the connection.  The server side does not matter, the client side does.

Ok you can configure some SSL FTP servers to request a client
certificate and drop the connection if a valid client certificate is not
presented.

So if you purchase a server certificate from a trusted root such as
Verisign, most clients will accept the server certificate and connect.
If you generate your own certificate some clients will not be able to
validate up to a root certificate and you have to export and send your
certificate store certificate for them it import.


 

Chris Bipes
Director of Information Services
CrossCheck, Inc.


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Hart, Doug - EI
Sent: Wednesday, April 23, 2008 11:27 AM
To: Midrange Systems Technical Discussion
Subject: RE: FTP-SSL from Client Side



Thanks   So I don't need to send out an exported copy of my DC.   The
only validation I get from the client is that he has a profile and
password.  The DC hand shake once accepted by the client is automatic.
I hope I made it clear before that the remote client is running Windows
2003 Server and not an iSeries.