Re: Security and iSeries Navigator Management Central

[Charles Wilt <charles.wilt@xxxxxxxxx>]

Ok the output from openssl didn't seem to jive with what I was seeing
in my keydb after downloading the CA..

I used Firefox to extract the certificate being used, and imported
that using the IBM key management utility.

I now have SSL to the box, under My Connections...SSL verification
works and I've got the padlock showing for the system in my
connections.

However, trying to verify connections for Management Central fails with a
"Failed - could not connect to system SYSNAME"

Is it possible to restrict the IP addresses Management Central responds to?

Charles

On Fri, Jul 23, 2010 at 2:45 PM, Charles Wilt <charles.wilt@xxxxxxxxx> wrote:
> On Fri, Jul 23, 2010 at 1:35 PM, Lukas Beeler
> > I usually use openssl to debug SSL issues (Windows binaries here:
> > http://www.deanlee.cn/programming/openssl-for-windows/).
> >
> > For example, do this:
> > openssl s_client -connect youribmi:992
> >
> > This will show you which public certificate the Telnet/SSL server uses.
>
> I can give that a shot, I'll see what ports management central uses.