Re: [EXTERNAL] SSL/TLS issue with FTP

On Mon, Sep 29, 2025 at 3:15 PM Patrik Schindler <poc@xxxxxxxxxx> wrote:

Hello Brad,

Am 29.09.2025 um 19:06 schrieb Brad Stone <bvstone@xxxxxxxxx>:

You know, you can get ssl certificates that are good for a year or more

from Namecheap.com. I've been using them for years for myself and
customers. I think it' like 12 bucks a year or so.

The appeal of Letsencrypt isn't that they're offering cost free
certificates, but that — at least on Linux — it's a fire and forget
process. Modern distros have certbot in their package system. Install, run
once, and renewals will be handled automatically from there on.

ACME is a publicly documented protocol Letsencrypt uses for authentication
purposes, but vendors are very slow to implement this. Maybe submit an idea
to the IBM ideas site?

Most of them now, though, if you buy a 5 year certificate you still will

have to update the cert every year, but that's a lot better than every 90
days.

To me, the need for manually updating certificates is highly annoying.
It's not the cost, it's the lack of industry adoption for automating this
process.

Seems like an IBM i problem more than anything. The reason they do this is
because CAs change, technology changes, etc.

:wq! PoC

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.