> The certificate works fine for RECEIVE ORDER over a non-SSL connection.

I'm not a ShopZ expert but generally speaking certificate implies SSL and 
vice-versa. In other words, non-SSL means no certificate in the picture.

Someone here should be able to tell you who is the CA (certificate authority) 
that signs IBM's ShopZ server certificate. Then you should see if you have that 
CA's root certificate in your keyring.

Charles

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of John Chase
Sent: Thursday, September 20, 2012 8:44 AM
To: [email protected]
Subject: Re: ShopzSeries SSL Connectivity Test

On Fri, 14 Sep 2012 17:08:04 -0700, Charles Mills <[email protected]> wrote:

>My bad --  DEBUG, not TRACE.
>
>Try
>
>DEBUG FLO
>DEBUG INT
>DEBUG ACC
>DEBUG SEC
>
>Charles
>
>-----Original Message-----
>From: IBM Mainframe Discussion List On Behalf Of John Chase
>Sent: Thursday, September 13, 2012 11:05 AM
>
>On Thu, 13 Sep 2012 06:44:53 -0700, Charles Mills <[email protected]> wrote:
>
>>Turn on some FTP tracing. You can do it in FTP.DATA. Take a look at the TRACE 
>>(?) statement in the CS configuration manuals and pick some plausible options.
>>
>>Charles
>
>Not much new with TRACE in the FTP.DATA:
[ snip ]

OK, the DEBUG options "write a book" now.  :-)

Our firewall guys tried a couple different things, and I guess we made some 
"progress":  Now the failure is "FC0994 authServer: secure_socket_init failed 
with rc = 8 (Certificate validation error)".

Time to call Shopz Support, since we're trying to use the certificate they 
issued.  The certificate works fine for RECEIVE ORDER over a non-SSL connection.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to