FTP SSL using get files

[Ace]

Guys,

I need to get some files from a FTP server that uses SSL over port 990.
Now I have made connection using an application called FileZilla, and that
works. The only thing that I saw was the message about certificates. That
came once. I cannot reproduce that. Can I remove certificates someway ?

Than, can someone tell me how I should connect using a AS400 V5R4M0.
If I FTP to the ftp server over port 990 I get the message:

"Secure connection error, return code -23."

I'm sure it has to do something with certificates, but I don't understand.

Thanks all.
Ace

[Peter H. Coffin]

On Fri, 18 Sep 2009 15:16:06 +0200, Ace wrote:
> Guys,
>
> I need to get some files from a FTP server that uses SSL over port 990.
> Now I have made connection using an application called FileZilla, and that
> works. The only thing that I saw was the message about certificates. That
> came once. I cannot reproduce that. Can I remove certificates someway ?

Nope. That's what makes SSL work.

> Than, can someone tell me how I should connect using a AS400 V5R4M0.
> If I FTP to the ftp server over port 990 I get the message:
>
> "Secure connection error, return code -23."
>
> I'm sure it has to do something with certificates, but I don't understand.

It does indeed. That error message means that the certificate being used
isn't trustworthy. That can be because the root certificate it's signed
with is expired or it's a self-signed certificate or (very slim chance)
someone's trying to intercept the connection. For either of the first
two options (the likely ones), you're going to want to learn how to use
the Digital Certificate Manager, and learn a chunk about SSL to figure
out which problem it is and fix it.

--
4. Shooting is not too good for my enemies.
--Peter Anspach's list of things to do as an Evil Overlord

[Ace]

"Peter H. Coffin" <hel...@ninehells.com> schreef in bericht
news:slrnhb73bo....@abyss.ninehells.com...

OK, I will. I have DCM running on my browser. But how can I get the
certificate that is being send by a FTPS server be trusted. Should I enter
it in DCM or should I adopt it from somewhere else, or does the server
present it to my AS400.

Thx,
Ace

[Peter H. Coffin]

I'm kinda fuzzy on that, because I haven't done it and have a bias
against ftps anyway (scp is much simpler in my brain). But, I think
roughly you're wanting to play this as though you're TheirCo in the
scenario described in

https://publib.boulder.ibm.com/infocenter/iseries/v5r3/index.jsp?topic=/rzaiq/rzaiqscenariossl.htm

and the links therein.

--
Judging by this particular thread, many people in this group spent their
school years taking illogical, pointless orders from morons and having
their will to live systematically crushed. And people say school doesn't
prepare kids for the real world. -- Rayner, in the Monastery