Turn on some FTP tracing. You can do it in FTP.DATA. Take a look at the TRACE 
(?) statement in the CS configuration manuals and pick some plausible options.

Charles

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of John Chase
Sent: Thursday, September 13, 2012 6:03 AM
To: [email protected]
Subject: ShopzSeries SSL Connectivity Test

Hi, All,

Anybody successfully using SSL/TLS to download stuff from ShopzSeries direct to 
z/OS?  How does one need to set up the z/OS client to do so?

Trying the ShopzSeries Connectivity Test for the first time.  I've set up the 
FTP.DATA specifications according to the sample provided by ShopzSeries, and am 
using their sample JCL almost unchanged (using local JOB card is about the only 
change).  All I get so far is this:

EZA1450I IBM FTP CS V1R13                                                  
EZA1772I FTP: EXIT has been set.                                           
EZYFT18I Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages.  
EZA1554I Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21.
220-IBM's internal systems must only be used for conducting IBM's          
220-business or for purposes authorized by IBM management.                 
220-                                                                       
220-Use is subject to audit at any time by IBM management.                 
220-                                                                       
220 dhebpcb01 secure FTP server ready.                                     
EZA1701I >>> AUTH TLS                                                      
234 SSLv23/TLSv1                                                           
EZA2897I Authentication negotiation failed                                 
EZA1534I *** Control connection with dispby-117.boulder.ibm.com dies.      
EZA1457I You must first issue the 'OPEN' command                           
EZA1735I Std Return Code = 10234, Error Code = 00010                       
 
I'm using our SMP/E Client Certificate that we use for RECEIVE ORDER jobs.  The 
return code and client error code say nothing more than "connection failed"; no 
clues as to why.

Might we need to "poke a hole" in our firewall?  Haven't tried that yet; 
RECEIVE ORDER jobs work without it anyway.

Any other ideas would be appreciated as well.

TIA,

    -jc-

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to