[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Help...
Hi Steve,
Do look for the readme member.
It clearly sets out any steps required for setting up SSL.
Loek.
----- Original Message -----
From: "Steve" <Steve@xxxxxxxxxx>
To: "'HTTPAPI and FTPAPI Projects'" <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Sent: Saturday, December 04, 2010 11:52 PM
Subject: RE: Help...
> Steve And Scott. Thank You so much.
>
> The Non SSL is fine now. It may be weeks/months before I get someone to
> setup the SSL Certs. I don't have authority. You know how some clients can
> be.
>
> Scott Thank you for pointing that out in the xml, I was so close and yet
> so
> far. I wont miss that again. I hope.
>
> And Steve for your example and conversation.
>
> If you have any good Info on using SSL, what I need to setup I'd
> appreciate
> it.
>
> Steve
>
>
> -----Original Message-----
> From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
> [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Scott Klement
> Sent: Saturday, December 04, 2010 2:28 AM
> To: HTTPAPI and FTPAPI Projects
> Subject: Re: Help...
>
> Hi Steve Bowdoin,
>
>> you need the GSK to consume a proteted page.
>> unless you have to send them your certificate, you wont need to deal with
>> DCM at all.
>
> Errr... you're half-right. You only need DCM/GSK/SSL if you want to
> connect to an SSL page.
>
> However, I disagree with the "...unless you have to send them your
> certificate..." part of your statement. In the _vast_ majority of the
> cases where you use SSL in HTTP, you don't send any certificates from
> the client to the server.
>
> But, if you use any SSL at all, you'll need the DCM to have a *SYSTEM
> certificate store. That's part of the basics of setting up SSL for any
> application that runs on IBM i. (And, it's really very, very, simple
> to set up...)
>
>>
>> i believe, but have no proof, that if you have what it takes to run DCM
> then
>> you have GSK. I could be worng.
>
> Yes. The Global Secure Toolkit (GSKit) is a core part of IBM i. If you
> didn't have it, you wouldn't have been able to compile HTTPAPI in the
> first place. The errors he's getting actually prove that he _does_
> have GSKit.
>
> He doesn't have a *SYSTEM certificate store, however. And, again, it's
> a matter of clicking the "create *SYSTEM certificate store" option, and
> probably, assigning a password to it. That's all. It's dead simple.
> (Once you find the option!)
> -----------------------------------------------------------------------
> This is the FTPAPI mailing list. To unsubscribe, please go to:
> http://www.scottklement.com/mailman/listinfo/ftpapi
> -----------------------------------------------------------------------
>
> -----------------------------------------------------------------------
> This is the FTPAPI mailing list. To unsubscribe, please go to:
> http://www.scottklement.com/mailman/listinfo/ftpapi
> -----------------------------------------------------------------------
-----------------------------------------------------------------------
This is the FTPAPI mailing list. To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------