I assume it's complete - I don't see an obvious error.
Digital certificate information for
CERTAUTH:
Label: Go Daddy Class
2
Certificate ID:
2QiJmZmDhZmjgceWQMSBhISoQMOTgaKiQPJA
Status:
TRUST
Start Date: 2004/06/29
13:06:20
End Date: 2034/06/29
13:06:20
Serial
Number:
>00<
Issuer's
Name:
>OU=Go Daddy Class 2 Certification Authority.O=The Go Daddy Group,
Inc<
>..C=US<
Subject's
Name:
>OU=Go Daddy Class 2 Certification Authority.O=The Go Daddy Group,
Inc<
>..C=US<
Signing Algorithm:
sha1RSA
Key Type:
RSA
Key Size:
2048
Private Key:
NO
Ring
Associations:
Ring Owner:
TN3270
Ring:
>TNRING<
Ring Owner:
IBMUSER
Ring:
>FtpSecur<
Wow - that SEARCH CLASS(DIGTCERT) spewed out a lot of stuff. I'm not
sure what I was looking for on a cursory glance. I'll have to study that
one closer.
Question - The certificate on my FTP server was issued by Go Daddy, On my
z/OS system (Client) is all I need the Go Daddy root authority certificate
- or do I need to generate a public key from my FTP server and send to z/OS
to include in a ring?
On Wed, May 7, 2014 at 6:38 PM, Neubert, Kevin
<[email protected]>wrote:
> Is the chain complete? Check trust and Issuer's/Subject's Names.
> RACDCERT LIST(LABEL('Go Daddy Class 2')) CERTAUTH. Do you have all the
> names? SEARCH CLASS(DIGTCERT).
>
> Regards,
>
> Kevin
>
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]] On
> Behalf Of Mark Pace
> Sent: Wednesday, May 07, 2014 1:01 PM
> To: [email protected]
> Subject: Re: z/OS FTPS Client & Linux FTP server
>
> Yes, I did the digtcert refresh
> Digital ring information for user IBMUSER:
>
> Ring:
> >FtpSecur<
> Certificate Label Name Cert Owner USAGE DEFAULT
> -------------------------------- ------------ -------- -------
> GeoTrust Global CA CERTAUTH CERTAUTH NO
> Go Daddy Class 2 CERTAUTH CERTAUTH YES
>
> ***
>
> No ICH408I errors.
>
>
>
> On Wed, May 7, 2014 at 3:27 PM, Donald J. <[email protected]> wrote:
>
> > You did do a:
> > SETROPTS RACLIST(DIGTCERT) REFRESH
> > after last changing the keyring?
> >
> > What does the LISTRING show now?
> >
> > Does the userid submitting the batch job have any ICH408I errors in
> > the log?
> >
> > --
> > Donald J.
> >
> >
> > --
> > http://www.fastmail.fm - Send your email first class
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > email to [email protected] with the message: INFO IBM-MAIN
> >
>
>
>
> --
> The postings on this site are my own and don’t necessarily represent
> Mainline’s positions or opinions
>
> Mark D Pace
> Senior Systems Engineer
> Mainline Information Systems
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to [email protected] with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>
--
The postings on this site are my own and don’t necessarily represent
Mainline’s positions or opinions
Mark D Pace
Senior Systems Engineer
Mainline Information Systems
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN