Re: Certificate rejected

[tgriner@xxxxxxxxxxxxxx]

   Here are the messages from the joblog

   (GSKit) Identifier value is not
   valid.
   (GSKit) Certificate was rejected by the application supplied exit
   program
     or certificate being validated by SSL processing was
   revoked.

   Tim Griner 229 584 0687

   On Wed, 13 Jul 2016 23:34:14 -0500, Scott Klement <sk@xxxxxxxxxxxxxxxx>
   wrote:

     Tim,
     HTTPAPI lets the operating system handle SSL/TLS. That means the
     things
     you have configured in the IBM i Digital Certificate Manager (DCM)
     apply
     to HTTPAPI as well as the other SSL/TLS applications running on the
     OS.
     In this case, you have assigned an exit program in your DCM that is
     called each time an SSL certificate is received -- presumably, you
     did
     that in order to only allow certain certificates to connect to your
     IBM
     i. For that reason, when you try to connect with SSL in HTTPAPI, it
     runs the same exit program and will reject certificates that don't
     match
     what your exit program allows.
     -SK
     On 7/13/2016 12:31 PM, tgriner@xxxxxxxxxxxxxx wrote:
     >
     > Members,
     > I just installed the httpapi programs. When I send a request i
     get.
     >
     > SSL Handshake: (GSKit) Certificate was rejected by the application
     supplied exit.
     >
     > Any help would be greatly appreciated.
     >
     > Tim Griner 229 584 0687
     --------------------------------------------------------------------
     ---
     This is the FTPAPI mailing list. To unsubscribe, please go to:
     http://www.scottklement.com/mailman/listinfo/ftpapi
     --------------------------------------------------------------------
     ---

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------