RE: [BULK] Re: HTTPAPI sending a certificate.

["Jason Baker" <JasonB@xxxxxxxxxx>]

Doug,

I took the certificate, imported it into IE as "exportable".  I then
exported it on the IFS.  I then went to DCM and tried to import the new
certificate exported from IE and as before receive the following error:

The validity period does not contain today or does not fall within its
issuer's validity period. Be sure that the date, time, and the offset
from GMT are correct on your system. If you observe daylight savings
time, be sure that it is correct on your system as well as on the system
that is used by your browser and by the CA.

This was when I got IBM DCM Support involved.

Thank you for the suggestions.


-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
[mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Bak, Doug
(LMF)
Sent: Tuesday, September 29, 2009 9:10 AM
To: HTTPAPI and FTPAPI Projects
Subject: RE: [BULK] Re: HTTPAPI sending a certificate.

Jason,

I've had to work around problems with certificates issued by different
parties and one thing that's worked for me in the past is importing the
certificate using Internet Explorer and then exporting it again for
import into DCM. In IE, look in Tools, Internet Options, Content,
Certificates.

DCM seems to be more strict than other certificate handling programs
I've had to use, but IE has worked as an intermediate step, so it might
be worth a try.

Doug

-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
[mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Jason Baker
Sent: Tuesday, September 29, 2009 8:33 AM
To: HTTPAPI and FTPAPI Projects
Subject: RE: [BULK] Re: HTTPAPI sending a certificate.

Elbert,

When working with IBM DCM Support, they had me do this exact same thing
but that wouldn't work.  It simply would not import into DCM.

I sent multiple certificates to IBM DCM Support for them to try and
import on their box and none of them would import.

Thanks for your reply.



-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
[mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Elbert Cook
Sent: Monday, September 28, 2009 7:18 PM
To: 'HTTPAPI and FTPAPI Projects'
Subject: RE: [BULK] Re: HTTPAPI sending a certificate.

A digital certificate for a site is the same no matter what platform. If
you
can login to the website using Internet Explorer without installing any
special client certificates. Then IE has downloaded a working
certificate.
You can actually export the working certificate from IE, and import it
to
the Iseries.

But you have to use the DCM (Digital Certificate Manager) on the Iseries
to
import the certificate. Then you have to Trust the certificate in the
DCM.

I had to do this with a bank that we did business with 5 or 6 years ago.
 

-----Original Message-----
From: Jason Baker [mailto:JasonB@xxxxxxxxxx] 
Sent: Monday, September 28, 2009 4:49 PM
To: HTTPAPI and FTPAPI Projects
Subject: RE: [BULK] Re: HTTPAPI sending a certificate.


Scott,

After being on the phone with the banks credit card processing company
basically all day, it turns out they "refuse" to send us a "valid"
client certificate and state that if we wouldn't use RPG it would work
just fine.  They want me to use PHP or Java to pick up the file stored
in a folder "as is".


-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------



******* Confidentiality Notice *******
This email, its electronic document attachments, and the
contents of its website linkages may contain confidential
health information. This information is intended solely
for use by the individual or entity to whom it is
addressed. If you have received this information in error,
please notify the sender immediately and arrange for the
prompt destruction of the material and any accompanying
attachments.


-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------