Re: Populate with CAs

Don't know what DCM does when populating (maybe IBM should be asked directly) using the DCM populate button,but the (experimental, still one can see how to tap into the API) can pick from PASE stuff.
In fact there are some usable sources in PASE...
yum whatprovides ca-certificates-mozilla
gets distributed in the ibm-repo
or have a look at the java things (that usually are reasonably updated so one can piggyback on them...)

find  /QOpenSys/QIBM/ProdData/JavaVM/ -iname cacerts -exec keytool -list -v -keystore {} -storepass changeit \; | less








On Monday, December 1, 2025 at 07:24:02 PM GMT+1, Rob Berendt <robertowenberendt@xxxxxxxxx> wrote:

cesco,
Thank you.  If I were to use these tools what would be the parameters for
pulling in whatever certs the latest PTFs downloaded?

On Mon, Dec 1, 2025 at 12:16 PM cesco via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

Well, I can only speak for me here. I don't need choice at this point.

There is a known list of official root CAs
Yes, this is usually done in the package update process of the OS...
I noticed this tool for automation if one will find it useful (source
leverage jt400 I think)

https://github.com/ThePrez/DCM-tools





--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.