Re: Secure FTP (FTPS) battle when moving to V7R4

Hello Troy,

Am 24.02.2020 um 23:08 schrieb Troy Hyde <troy.hyde@xxxxxxxxxxx>:

The name they gave me is EXTFTPSSL.VISADPS.COM.

Pity, the name can't be resolved to an IP address (here in Germany).

Of course the certificate files I use for import are completely unreadable text.

You can try to run the OpenSSL command over that file:
openssl x509 -in <certfile> -text

This will output in clear text what's it all about.

Is there a way to confirm the name matches once the certificate is imported?

See above. If the name can be resolved to an IP address, you can check online:

openssl s_client -connect EXTFTPSSL.VISADPS.COM:21 (since they claim explicit SSL on port 21)

If openssl is installed on your IBM i, you can run both from qp2term, maybe redirect output to a file (since output is more than a few lines). <certfile> has to go somewhere in IFS to check but really don't know if it's supposed to be ASCII or EBCDIC encoded. Since PASE is a fake AIX, I guess, it's ASCII.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc