Re: SNDDST / Send Email fails on Certificate error

[Bradley Stone <bvstone@xxxxxxxxx>]

Don,

Here's a link on how you can use open SSL to get the certificate
required so that you can export the CAs from the certificate.
http://docs.bvstools.com/home/ssl-documentation/openssl

Once you have that, you can export the CAs using these instructions
(but skip the first part that shows how to get the certificate from a
web page):

http://docs.bvstools.com/home/ssl-documentation/exporting-certificate-authorities-cas-from-a-website

Then import them into your *SYSTEM store starting with the topmost CA
in the chain, and ending with the bottom most CA:
http://docs.bvstools.com/home/ssl-documentation/importing-a-certificate-authority-ca

Feel free to contact me for assistance.  I do this many times a week
for customers.  :)

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any
Cloud Provider!


On Thu, Jun 22, 2017 at 11:41 PM, Don Brown <DBrown@xxxxxxxxxx> wrote:
> Hi All,
>
> I am sure Brad has answered this one in the past but my google skills
> today and failing me.
>
> Email from the IBM i was working until upgrading to V7R3
>
> Running a trace I can see the IBM i is being rejected access from the
> Exchange server.
>
> The error indicates an ssl authentication error.
>
> Ok lets check DCM - Ok .. no DCM set up at all, no problems let's do that.
>
> Now how do i determine what certificates on the Exchange server I need to
> export and import into DCM.
>
> And please correct me but I need to install any Intermediate CA's first ?
>
>
> Thanks
>
>
> Don Brown
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate link: http://amzn.to/2dEadiD