Comments on: Using the i5/OS FTP Client with self signed certificates doesn’t work http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/ The experiences of an SMB IT technician Sun, 11 Dec 2011 20:09:56 +0000 hourly 1 http://wordpress.org/?v=3.0 By: Lukas Beeler http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/comment-page-1/#comment-1293 Lukas Beeler Tue, 31 Jul 2007 20:21:49 +0000 http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/#comment-1293 The problems I had were twofold: a) I wasn't able to import an OpenSSL CA certificate into DCM. I didn't investigate this closely. I was able to import the CA of another i5/OS instance. b) I was unable to disable the certificate check of the client - the client always verified the SSL certificate. And I never used client-side certificates, they're just too much work. The problems I had were twofold:

a) I wasn’t able to import an OpenSSL CA certificate into DCM. I didn’t investigate this closely. I was able to import the CA of another i5/OS instance.

b) I was unable to disable the certificate check of the client – the client always verified the SSL certificate.

And I never used client-side certificates, they’re just too much work.

]]> By: Chris Bipes http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/comment-page-1/#comment-1292 Chris Bipes Tue, 31 Jul 2007 20:12:16 +0000 http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/#comment-1292 Before a server will accept a certificate from a non-trusted certificate authority, (Self signed Cert.), you will have to import the CA certificate. Then the SSL FTP server will accept the SSL client certificate. If you used a commerical certificate such as Verisign, you would not have had an issue. Some servers will validate a client certificate if available while others will ignore them. You can configure the iSeries FTP server to ignore, validate if available, or require the client certificate. Before a server will accept a certificate from a non-trusted certificate authority, (Self signed Cert.), you will have to import the CA certificate. Then the SSL FTP server will accept the SSL client certificate. If you used a commerical certificate such as Verisign, you would not have had an issue. Some servers will validate a client certificate if available while others will ignore them. You can configure the iSeries FTP server to ignore, validate if available, or require the client certificate.

]]> By: Lukas Beeler http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/comment-page-1/#comment-171 Lukas Beeler Thu, 08 Mar 2007 19:19:46 +0000 http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/#comment-171 Ich find das praktischer ;) Weil das ganze via CSS realisiert ist funktioniert im übrigen auch ein Rechtsklick, Mittelklick "richtig". Ich find das praktischer ;)

Weil das ganze via CSS realisiert ist funktioniert im übrigen auch ein Rechtsklick, Mittelklick “richtig”.

]]> By: reto http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/comment-page-1/#comment-170 reto Thu, 08 Mar 2007 19:07:58 +0000 http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-with-self-signed-certificates-doesnt-work/#comment-170 Was war eigentlich so schlecht an der alten Art Fotos zu verlinken? Was war eigentlich so schlecht an der alten Art Fotos zu verlinken?

]]>