RE: Help...

["Steve" <Steve@xxxxxxxxxx>]

Steve And Scott.  Thank You so much.  

The Non SSL is fine now.  It may be weeks/months before I get someone to
setup the SSL Certs. I don't have authority. You know how some clients can
be.

Scott Thank you for pointing that out in the xml, I was so close and yet so
far. I wont miss that again. I hope.

And Steve for your example and conversation.

If you have any good Info on using SSL, what I need to setup I'd appreciate
it.

Steve


-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
[mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Scott Klement
Sent: Saturday, December 04, 2010 2:28 AM
To: HTTPAPI and FTPAPI Projects
Subject: Re: Help...

Hi Steve Bowdoin,

> you need the GSK to consume a proteted page.
> unless you have to send them your certificate, you wont need to deal with
> DCM at all.

Errr...  you're half-right.   You only need DCM/GSK/SSL if you want to 
connect to an SSL page.

However, I disagree with the "...unless you have to send them your 
certificate..." part of your statement.  In the _vast_ majority of the 
cases where you use SSL in HTTP, you don't send any certificates from 
the client to the server.

But, if you use any SSL at all, you'll need the DCM to have a *SYSTEM 
certificate store.  That's part of the basics of setting up SSL for any 
application that runs on IBM i.   (And, it's really very, very, simple 
to set up...)

>
> i believe, but have no proof, that if you have what it takes to run DCM
then
> you have GSK.  I could be worng.

Yes.  The Global Secure Toolkit (GSKit) is a core part of IBM i.  If you 
didn't have it, you wouldn't have been able to compile HTTPAPI in the 
first place.   The errors he's getting actually prove that he _does_ 
have GSKit.

He doesn't have a *SYSTEM certificate store, however.  And, again, it's 
a matter of clicking the "create *SYSTEM certificate store" option, and 
probably, assigning a password to it.  That's all.  It's dead simple. 
(Once you find the option!)
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------