RE: Certificate Request with sha1 encoding

["Peter Sawatzki" <peter@xxxxxxxxxxx>]

Sender: "Peter Sawatzki" <peter@xxxxxxxxxxx>

Scott,

Thanks for the help. I was able to solve the problem by exporting the
private key of the AS/400 using DCM into a PKCS#12 file, transfer this to a
PC and formulate the certificate request using OpenSSL here. There were also
some additional required attributes that were not in the DCM request but
that could be included in the OpenSSL request.

Peter

-----Original Message-----
From: owner-ftpapi@xxxxxxxxxxxxx [mailto:owner-ftpapi@xxxxxxxxxxxxx] On
Behalf Of Scott Klement
Sent: Tuesday, May 31, 2005 7:19 PM
To: ftpapi@xxxxxxxxxxxxx
Subject: RE: Certificate Request with sha1 encoding

Sender: Scott Klement <sk@xxxxxxxxxxxxxxxx>

Hello,

> I was using the openssl tool on my PC to dump the request that was 
> generated by the AS/400's Digital Certificate manager. However to make 
> a request for a certificate of the AS/400's private key I somehow need 
> access to the private key store, correct ? Or is openssl available on 
> the iSeries (I'm on a V5R2 system).

I think you can make OpenSSL run in PASE on the iSeries, but unfortunately
it won't use the same database for key info that the DCM uses, so perhaps it
won't help you.

I don't know how to make the DCM use SHA1,

All I can suggest is that you ask IBM, maybe they have a way to tell it to
use SHA1.

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubsribe from the list send mail to
majordomo@xxxxxxxxxxxxx with the body: unsubscribe ftpapi mymailaddr
-----------------------------------------------------------------------

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubsribe from the list send mail
to majordomo@xxxxxxxxxxxxx with the body: unsubscribe ftpapi mymailaddr
-----------------------------------------------------------------------