Re: [Ftpapi] Using HTTPAPI and non *SYSTEM certificate store

[Christian <larsenvalverde@xxxxxxxxx>]

Thanks for your answer.

With axis I can do something like this:

axiscStubSetSecure(wsstub.handle:
'/QIBM/.....':
'password':
'GEOTRUST.....':
'NONE':
'05':
'NONE');

axiscStubSetUsername(wsstub:'xxxxx');
........


This way I send the certificate store and password but I don't know if I can do it with httpapi..... 

I'm using Thomas' WSDL2RPG because I need to use dinamic memory......

I dont know if this is part of gskit....

Christian


> El 6 mar 2017, a las 11:43, Scott Klement <sk@xxxxxxxxxxxxxxxx> escribió:
> 
> Hi Christian,
> 
> Unfortunately, I have not used a certificate store besides *SYSTEM, so I do not know exactly what is involved.
> 
> It is important to understand that HTTPAPI does not provide it's own SSL/TLS code -- it uses the operating system's code.  So if the operating system is capable of what you're describing, it should work with HTTPAPI.  The tricky part is to find out how to do it with the operating system!
> 
> Internally, we use IBM-supplied Global Secure Toolkit ("gskit" for short.)
> 
> If you can tell me how to access your certificate using the gskit API, I'd be glad to explain how it can be used from HTTPAPI.  Or, if necessary, I can make modifications to HTTPAPI to make it possible.
> 
> -SK
> 
> 
>> On 3/4/2017 12:42 PM, larsenvalverde@xxxxxxxxx wrote:
>> Hello.
>> 
>> I’m using the WDSL2RPG and HTTPAPI to connect to a webservice, but I have a problem.  I need to use a digital certificate, and, for security reasons, it cannot be on *SYSTEM certificate store.
>> 
>> I know I can do this:
>> 
>> https_init(‘/ANOTHER_CERTIFICATE_STORE’:*ON:*ON:….)
>> 
>> But I don’t know how to tell httpapi  what certificate I need to use… and the password needed to use it.
>> 
>> Can anyone explain me how to do it, if it is possible?
>> 
>> Thanks in advance.
>> 
>> Christian.
>> _______________________________________________
>> Ftpapi mailing list
>> Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
>> http://scottklement.com/mailman/listinfo/ftpapi
>> 
> 
> -- 
> _______________________________________________
> Ftpapi mailing list
> Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
> http://scottklement.com/mailman/listinfo/ftpapi
-- 
_______________________________________________
Ftpapi mailing list
Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
http://scottklement.com/mailman/listinfo/ftpapi