RE: Error 107 from GSKit when using SSL

["Ian Patterson" <ian@xxxxxxxxxxxxxxxxxxxx>]

Sender: "Ian Patterson" <ian@xxxxxxxxxxxxxxxxxxxx>

Importing certs from Internet explorer is a good way to do it.

If you can get to a site that uses the certs you need, click on the padlock
in IE and check the certs.
Look at the cert path, Highlight the one(s) you want, view cert, details
tab, and export (copy) the cert. Use the format .p7B(PKCS #7)
Move to IFS & import into DCM

Regards

Ian Patterson
Grange Management Consultants
tel 01947 880458
www.grange-systems.co.uk




-----Original Message-----
From: owner-ftpapi@xxxxxxxxxxxxx [mailto:owner-ftpapi@xxxxxxxxxxxxx]On
Behalf Of Damon U
Sent: 18 February 2004 21:24
To: ftpapi@xxxxxxxxxxxxx
Subject: RE: Error 107 from GSKit when using SSL


Sender: "Damon U" <damonu74@xxxxxxxxxxx>

Thanks all,

I see the expired certificates.  I won't be able to get the ptf's until
later this week, can I just export the Verisign certs from something like
...gulp...  Internet Explorer, and import those into the DCM?

I have also emailed Ian and taken him up on his offer of getting the p7b
file from him.

Are there any tricks to importing into the DCM that I need to be aware of
(servers or subsystems that will need to be restarted, etc)?

Thanks again all.

Damon


>From: "Troy Paulson" <tpaulson@xxxxxxxxxxx>
>Reply-To: ftpapi@xxxxxxxxxxxxx
>To: <ftpapi@xxxxxxxxxxxxx>
>Subject: RE: Error 107 from GSKit when using SSL
>Date: Wed, 18 Feb 2004 10:03:56 -0600
>
>Sender: "Troy Paulson" <tpaulson@xxxxxxxxxxx>
>
>Damon,
>
>In the DCM, check the expiration date for the Verisign Class 3 CA.  It
>expired on 2/7/04.  I'm currently downloading the PTF from IBM to get the
>new Certificate.  Here is the URL for the PTF that I found.
>
>http://www-912.ibm.com/a_dir/as4ptf.nsf/7160b1923c61b30b86256a92006c67b0/53
d
>b1d7238668e3c86256e3900529f86?OpenDocument
>
>Troy
>
>-----Original Message-----
>From: owner-ftpapi@xxxxxxxxxxxxx [mailto:owner-ftpapi@xxxxxxxxxxxxx]On
>Behalf Of Damon U
>Sent: Wednesday, February 18, 2004 9:29 AM
>To: ftpapi@xxxxxxxxxxxxx
>Subject: Error 107 from GSKit when using SSL
>
>
>Sender: "Damon U" <damonu74@xxxxxxxxxxx>
>
>Hello All,
>
>I am new to the list, and new to the HTTPAPI.  Thanks to Scott for posting
>this API, it's great!
>
>I have run all examples and worked through most of them.  On example5, I
>first ran it with the UPS address, and it worked great.  No problems using
>SSL at all.  Next I attempted to use it to connect to a site on which a
>client of mine uses SSL.  I get the error message back: SSL Handshake
>Error:
>GSKit Error 107.  I never get to actualy post anything, or read any
>response
>back.  The error occurs in the gsk_secure_soc_init call in HTTPAPIR4.
>
>GSKit Error 107 seems to have to do with an expired certificate.  Since
>things work with the UPS example I am assuming that the expired certificate
>must be on the server that I am attempting to connect to?  (I haven't found
>any expired certs on my 400.)
>
>Anyone have any other thoughts or suggestions on how I might go about
>figuring out where this expired certificate is at?  (if in fact, that is
>really the problem being encountered in the SSL Handshake).
>
>Thanks for any hints or suggestions.
>
>Regards,
>Damon
>
>_________________________________________________________________
>Watch high-quality video with fast playback at MSN Video. Free!
>http://click.atdmt.com/AVE/go/onm00200365ave/direct/01/
>
>-----------------------------------------------------------------------
>This is the FTPAPI mailing list.  To unsubsribe from the list send mail
>to majordomo@xxxxxxxxxxxxx with the body: unsubscribe ftpapi mymailaddr
>-----------------------------------------------------------------------
>
>-----------------------------------------------------------------------
>This is the FTPAPI mailing list.  To unsubsribe from the list send mail
>to majordomo@xxxxxxxxxxxxx with the body: unsubscribe ftpapi mymailaddr
>-----------------------------------------------------------------------

_________________________________________________________________
Get fast, reliable access with MSN 9 Dial-up. Click here for Special Offer!
http://click.atdmt.com/AVE/go/onm00200361ave/direct/01/

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubsribe from the list send mail
to majordomo@xxxxxxxxxxxxx with the body: unsubscribe ftpapi mymailaddr
-----------------------------------------------------------------------


-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubsribe from the list send mail
to majordomo@xxxxxxxxxxxxx with the body: unsubscribe ftpapi mymailaddr
-----------------------------------------------------------------------