I assume it's complete  - I don't see an obvious error.
Digital certificate information for
CERTAUTH:


  Label: Go Daddy Class
2
  Certificate ID:
2QiJmZmDhZmjgceWQMSBhISoQMOTgaKiQPJA
  Status:
TRUST

  Start Date: 2004/06/29
13:06:20
  End Date:   2034/06/29
13:06:20
  Serial
Number:


>00<

  Issuer's
Name:

       >OU=Go Daddy Class 2 Certification Authority.O=The Go Daddy Group,
Inc<

>..C=US<

  Subject's
Name:
       >OU=Go Daddy Class 2 Certification Authority.O=The Go Daddy Group,
Inc<

>..C=US<

  Signing Algorithm:
sha1RSA
  Key Type:
RSA
  Key Size:
2048
  Private Key:
NO
  Ring
Associations:

    Ring Owner:
TN3270

Ring:


>TNRING<

    Ring Owner:
IBMUSER

Ring:


>FtpSecur<





Wow - that SEARCH CLASS(DIGTCERT)   spewed out a lot of stuff.  I'm not
sure what I was looking for on a cursory glance.  I'll have to study that
one closer.

Question -  The certificate on my FTP server was issued by Go Daddy,  On my
z/OS system (Client)  is all I need the Go Daddy root authority certificate
- or do I need to generate a public key from my FTP server and send to z/OS
to include in a ring?



On Wed, May 7, 2014 at 6:38 PM, Neubert, Kevin
<[email protected]>wrote:

> Is the chain complete?  Check trust and Issuer's/Subject's Names.
>  RACDCERT LIST(LABEL('Go Daddy Class 2')) CERTAUTH.  Do you have all the
> names?  SEARCH CLASS(DIGTCERT).
>
> Regards,
>
> Kevin
>
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]] On
> Behalf Of Mark Pace
> Sent: Wednesday, May 07, 2014 1:01 PM
> To: [email protected]
> Subject: Re: z/OS FTPS Client & Linux FTP server
>
> Yes, I did the digtcert refresh
>  Digital ring information for user IBMUSER:
>
>    Ring:
>         >FtpSecur<
>    Certificate Label Name             Cert Owner     USAGE      DEFAULT
>    --------------------------------   ------------   --------   -------
>    GeoTrust Global CA                 CERTAUTH       CERTAUTH     NO
>    Go Daddy Class 2                   CERTAUTH       CERTAUTH     YES
>
>  ***
>
> No ICH408I errors.
>
>
>
> On Wed, May 7, 2014 at 3:27 PM, Donald J. <[email protected]> wrote:
>
> > You did do a:
> > SETROPTS RACLIST(DIGTCERT) REFRESH
> > after last changing the keyring?
> >
> > What does the LISTRING show now?
> >
> > Does the userid submitting the batch job have any ICH408I errors in
> > the log?
> >
> > --
> >   Donald J.
> >
> >
> > --
> > http://www.fastmail.fm - Send your email first class
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > email to [email protected] with the message: INFO IBM-MAIN
> >
>
>
>
> --
> The postings on this site are my own and don’t necessarily represent
> Mainline’s positions or opinions
>
> Mark D Pace
> Senior Systems Engineer
> Mainline Information Systems
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to [email protected] with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>



-- 
The postings on this site are my own and don’t necessarily represent
Mainline’s positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to