Re: TLS/SSL Certificate update for IBM i ODBC

Joseph, I think Richard's message nails it.

Jack Woehr
Independent Consulting Programmer
303-847-8442
jack.woehr@xxxxxxxxxxx
www.procern.com
Stay Connected!
New Name. Same Great Service.
NON-DISCLOSURE NOTICE: This communication including any and all attachments is for the intended recipient(s) only and may contain confidential and privileged information. If you are not the intended recipient of this communication, any disclosure, copying further distribution or use of this communication is prohibited. If you received this communication in error, please contact the sender and delete/destroy all copies of this communication immediately.
________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Richard Schoen <richard@xxxxxxxxxxxxxxxxx>
Sent: Friday, March 1, 2024 8:20 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: TLS/SSL Certificate update for IBM i ODBC

Check this link out. I have run into this issue before.

https://github.com/richardschoen/howtostuff/blob/master/ibmi_acs_odbcssl_windows_issue_.md<https://github.com/richardschoen/howtostuff/blob/master/ibmi_acs_odbcssl_windows_issue_.md>

Regards,
Richard Schoen
Web: http://www.richardschoen.net<http://www.richardschoen.net>
Email: richard@xxxxxxxxxxxxxxxxx

-----Original Message-----

On Fri, Mar 1, 2024 at 8:50?AM Sizer, Joseph via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

Each year I use Digital Certificate Manager (DCM) to import my new SSL
cert. My root and CA cert are still good. I then assign the new SSL cert
to the applications that require them based on what last year's cert was
assigned to. I then verify that telnet, IBM i HTTP servers, etc. are all
using the new SSL cert.

This year, a client PC that uses a System DSN 64-bit ODBC connection to
the IBM I for a Microsoft Word mail merge, generated an error that defined
the SSL cert as not being trusted. I am using ODBC driver IBM I Access
ODBC Driver version 13.64.27.00 and ACS version 1.1.9.4<http://1.1.9.4>.

The error message generated when testing the connection is:
Data link error: Test connection failed because of an error in
initializing provider. IBM System I Access ODBC Driver Communication link
failure. Comm rc-25414 - CWBCO1050 - The IBM I server application
certificate is not trusted.

Changing the ODBC driver configuration to Non-SSL allows the mail merge to
work (Configure / Connection Options / Security - Do not user Secured
Sockets Layer (SSL)

Telnet (ACS) does not require any update at the PC client level. Is
anyone aware of a requirement where a PC client ODBC connect must run an
update for a new SSL cert? I would like to switch the connection back to
SSL.

Thanks.


Joe Sizer
IBM I Power Systems Administrator
Pencor Digital Services
--

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l<https://lists.midrange.com/mailman/listinfo/midrange-l>
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l<https://archive.midrange.com/midrange-l>.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.