Re: FTP TCP3D2C Connection protection error, return code -23

[B Stone <bvstone@xxxxxxxxx>]

John,

That means your system doesn't trust the "certificate authority" that
signed the SSL certificate.

I don't believe there's a way to ignore that on IBM's FTP client, but
importing the CA(s) is fairly simple.  Just retrieve the Certificate (or
CAs if you know how) and import them into your *SYSTEM store.

Retrieve the SSL certificate -
https://docs.bvstools.com/home/ssl-documentation/openssl
Exporting the CAs (skip the part about getting it from a website) -
https://docs.bvstools.com/home/ssl-documentation/exporting-certificate-authorities-cas-from-a-website
Importing into your *SYSTEM store -
https://docs.bvstools.com/home/ssl-documentation/importing-a-certificate-authority-ca


I'm happy to hepl with parts 1 and 2 if you want as well.  Just shoot me an
email with the address of the FTP server.  If it's available to the world
should be able to get it for you.

One issue, since you're on V7R1, is that the ciphers used in the SSL
certificate may not be supported by your OS level.  Hopefully you have an
OS upgrade in the works.

Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #15 <https://www.bvstools.com/mailtool.html>: The ability
to add a Footer to each email sent using an IFS stream file.

On Thu, May 9, 2019 at 6:58 AM john art <jhon_art@xxxxxxxxxxx> wrote:

> I'm trying to connect to an FTP server with this command:
> FTP RMTSYS (FTP.SERVERXXX.IT) PORT (990), but I get this error
> Connection protection error, return code -23.
> SSL (Secure Sockets Layer) function SSL_Handshake return code -23
> -23 The certificate is not signed by a valid certification authority.
> can someone give me some tips on how to resolve the issue?
> As400 with V7R1
> Thanks in advance
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com