[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Help...



Hi Steve,

Do look for the readme member.

It clearly sets out any steps required for setting up SSL.

Loek.



----- Original Message ----- 
From: "Steve" <Steve@xxxxxxxxxx>
To: "'HTTPAPI and FTPAPI Projects'" <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Sent: Saturday, December 04, 2010 11:52 PM
Subject: RE: Help...


> Steve And Scott.  Thank You so much.
>
> The Non SSL is fine now.  It may be weeks/months before I get someone to
> setup the SSL Certs. I don't have authority. You know how some clients can
> be.
>
> Scott Thank you for pointing that out in the xml, I was so close and yet 
> so
> far. I wont miss that again. I hope.
>
> And Steve for your example and conversation.
>
> If you have any good Info on using SSL, what I need to setup I'd 
> appreciate
> it.
>
> Steve
>
>
> -----Original Message-----
> From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
> [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Scott Klement
> Sent: Saturday, December 04, 2010 2:28 AM
> To: HTTPAPI and FTPAPI Projects
> Subject: Re: Help...
>
> Hi Steve Bowdoin,
>
>> you need the GSK to consume a proteted page.
>> unless you have to send them your certificate, you wont need to deal with
>> DCM at all.
>
> Errr...  you're half-right.   You only need DCM/GSK/SSL if you want to
> connect to an SSL page.
>
> However, I disagree with the "...unless you have to send them your
> certificate..." part of your statement.  In the _vast_ majority of the
> cases where you use SSL in HTTP, you don't send any certificates from
> the client to the server.
>
> But, if you use any SSL at all, you'll need the DCM to have a *SYSTEM
> certificate store.  That's part of the basics of setting up SSL for any
> application that runs on IBM i.   (And, it's really very, very, simple
> to set up...)
>
>>
>> i believe, but have no proof, that if you have what it takes to run DCM
> then
>> you have GSK.  I could be worng.
>
> Yes.  The Global Secure Toolkit (GSKit) is a core part of IBM i.  If you
> didn't have it, you wouldn't have been able to compile HTTPAPI in the
> first place.   The errors he's getting actually prove that he _does_
> have GSKit.
>
> He doesn't have a *SYSTEM certificate store, however.  And, again, it's
> a matter of clicking the "create *SYSTEM certificate store" option, and
> probably, assigning a password to it.  That's all.  It's dead simple.
> (Once you find the option!)
> -----------------------------------------------------------------------
> This is the FTPAPI mailing list.  To unsubscribe, please go to:
> http://www.scottklement.com/mailman/listinfo/ftpapi
> -----------------------------------------------------------------------
>
> -----------------------------------------------------------------------
> This is the FTPAPI mailing list.  To unsubscribe, please go to:
> http://www.scottklement.com/mailman/listinfo/ftpapi
> ----------------------------------------------------------------------- 

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------