RE: FTPs

["Chris Bipes" <chris.bipes@xxxxxxxxxxxxxxx>]

Thank you for the clarification.  I never have run in to a real self signed certificate then, just private CA's.  Did not know the difference in terminology.

Chris Bipes
Director of Information Services
CrossCheck, Inc.


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Lukas Beeler
Sent: Tuesday, April 20, 2010 8:48 AM
To: Midrange Systems Technical Discussion
Subject: Re: FTPs

On Tue, Apr 20, 2010 at 16:22, Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx> wrote:
> Just an FYI to clarify the use of Self Signed Certificates. ÂYou can use them you just need to get their CA Certificate in a .CER file and import it using DCM.

If they have a CA certificate, then it's not a self-signed
certificate, but a private PKI. These are two different scenarios.

Self signed certificate:

A certificate that signed itself. Usually, Root CAs are self signed,
and manually added for trust. But a simple host-certificate can also
be self-signed, this is something commonly done on Linux, but not on
Windows or the IBM i.

This didn't work back on V5R4.

Private PKI:

A certificate signed by a private CA. The CA is of course, as always,
self signed, but the host certificate is signed by the CA. This worked
back then on V5R4.