RE: [EXTERNAL] SSL/TLS issue with FTP -- MIDRANGE-L

We don't control these... we have a 3rd party hosting the site on AWS for us.

I just don't understand why the IBM system has an issue with this, whereas the PCs do not.

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Brad Stone
Sent: Monday, September 29, 2025 1:06 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: [EXTERNAL] SSL/TLS issue with FTP

I thought you said you imported the entire chain. Sorry if I misunderstood.

You know, you can get ssl certificates that are good for a year or more
from Namecheap.com. I've been using them for years for myself and
customers. I think it' like 12 bucks a year or so. Most of them now,
though, if you buy a 5 year certificate you still will have to update the
cert every year, but that's a lot better than every 90 days.

I'm sure there are other places to get SSL certificates, but that's the one
I've used for a while.

On Mon, Sep 29, 2025 at 10:16 AM Greg Wilburn <
gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

We had to manually download and add the intermediate certificate.

This is crazy... these certificates expire every 90 days. Surely they
should renew.

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Greg Wilburn
Sent: Monday, September 29, 2025 9:02 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] SSL/TLS issue with FTP

Our hosted FTP server must have updated the certificate over the weekend.
We are not unable to connect using
FTP RMTSYS(myftpserver) SECCNN(*SSL)

The error is
234 AUTH TLS successful
The server's certificate is not signed by a trusted certificate authority.
Do you want to trust the server's certificate temporarily in this session?
(y/n)
Secure connection error, return code 6000

Connecting from a PC works just fine. The CA is "Let's Encrypt".

In DCM, I've populated all of the Let's Encrypt CA's along with ISRG Root
1 and 2.

What am I missing?
[Logo]<https://protect.checkpoint.com/v2/r01/___https://www.totalbizfulfillment.com/___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3OjkwMjI6ODRkNWI5MGIzYjc4YmViOTNiNGJhNWYyNmI5MWU3YjQxMmJkMGU3ZGY2OTdmMDA4MmFjNTYyODFjMThiZjVlMzpwOlQ6VA> Greg Wilburn
Director of IT
301.895.3792 ext. 1231
301.895.3895 direct
gwilburn@xxxxxxxxxxxxxxxxxxxxxxx<mailto:gwilburn@xxxxxxxxxxxxxxxxxxxxxxx>
1 Corporate Dr
Grantsville, MD 21536
https://protect.checkpoint.com/v2/r01/___www.totalbizfulfillment.com___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3OjU4OGQ6ZGExZTc2YTA1MGM2MTkwMTRlOWVkNDQyNDVmNmVlNTc3Nzg4ZDFhNjY3ODRmZDYwNmFlMjcwZTZiYWUyZGU1MTpwOlQ6Rg<https://protect.checkpoint.com/v2/r01/___http://www.totalbizfulfillment.com___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3OjY5M2U6ZjQ3YjNlMzM1NzBmMzAwMmZjNDJhMjJiYzg0OTFkZGFmZmQ3MjAxZDc0MTJiYzgxNjBmMTNkNjg3NzkyZmFlNjpwOlQ6VA>
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://protect.checkpoint.com/v2/r01/___https://lists.midrange.com/rfnqrfsdqnxynsktdrniwfslj-q___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3Ojc1OGQ6ZjllZWZkNGU1ZTA4OGFkMjRmYTAyZjk0M2NkNzY4MmVkNjk5OTE5ZDJkMzY1YjBjNzYwMTEwM2NlZjI3NWFhMjpwOlQ6VA
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://protect.checkpoint.com/v2/r01/___https://archive.midrange.com/rniwfslj-q___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3OjdkMmE6MTVlZDdlMTI0ZDZjZGMyNjczNjIxNWM2YzBiZDRlZTA5YzRhMjY1YjdkMzdmYTM5N2ZjNDBlMjRhN2UzNzNiNTpwOlQ6VA.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

[CAUTION! This email originated outside of the organization. Please do not
open attachments or click links from an unknown or suspicious origin.]

Greg Wilburn
Director of IT
301.895.3792 ext. 1231
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://protect.checkpoint.com/v2/r01/___https://lists.midrange.com/rfnqrfsdqnxynsktdrniwfslj-q___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3Ojg0MjY6OTM5MmNiODkyNDY3MjZjYzNjMjlhMjI2YzhjODE3M2JhZmE3Y2ZmMzRjOTljZmVkOGViMWUwY2UzYmJmMGZkYzpwOlQ6VA
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://protect.checkpoint.com/v2/r01/___https://archive.midrange.com/rniwfslj-q___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3OmE0Yzg6MmU4MTBjNzI2YzQzMWQ4Y2I0NDI5OTNiYTYyMDE5MTJlYjk2OWNlMGYwYTdmYmU3NjM2NDI4YTZiOGZkYzVjNzpwOlQ6VA.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://protect.checkpoint.com/v2/r01/___https://lists.midrange.com/rfnqrfsdqnxynsktdrniwfslj-q___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3OmY0N2I6YjlkMzU2MTcwOWExNWIyNDViYzQ0OGFlNTViMjBmMmJmNDZiMDk2NTQ0YTBkZWQ4NWJmNDI2ZjQ2NjNkN2ZhZDpwOlQ6VA
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://protect.checkpoint.com/v2/r01/___https://archive.midrange.com/rniwfslj-q___.YzJ1OnRvdGFsYml6ZnVsZmlsbG1lbnQxOmM6bzowODc2YTc2ZGU5ZTc5ZDY3NDBhMDI4MWFmNzE2YzFkNDo3OjZjOTQ6NDAyYmQ1MzlhMzA4NTI4ZTM3ZTU3OWIyNzc5NDMzMmFiMGI3NzJjMmU1N2ZlNzA2MWJiOTczODFmM2NiMzMzODpwOlQ6VA.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Greg Wilburn
Director of IT
301.895.3792 ext. 1231