The testcase.boulder.ibm.com ftp server uses this certificate chain: Certificate chain 0 s:/C=US/ST=New York/L=Armonk/O=INTERNATIONAL BUSINESS MACHINES CORPORATION/CN=testcase.boulder.ibm.com i:/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G3 1 s:/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G3 i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority 3 s:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
The ftp.ap.ecurep.ibm.com & ftp.ecurep.ibm.com ftp servers use these certificate chains: Certificate chain 0 s:/C=DE/ST=Rheinland-Pfalz/L=Mainz/O=IBM Deutschland GmbH/CN=ftp.ap.ecurep.ibm.com i:/C=US/O=GeoTrust Inc./CN=GeoTrust SHA256 SSL CA 1 s:/C=US/O=GeoTrust Inc./CN=GeoTrust SHA256 SSL CA i:/C=US/O=GeoTrust Inc./OU=(c) 2008 GeoTrust Inc. - For authorized use only/CN=GeoTrust Primary Certification Authority - G3 2 s:/C=US/O=GeoTrust Inc./OU=(c) 2008 GeoTrust Inc. - For authorized use only/CN=GeoTrust Primary Certification Authority - G3 i:/C=US/O=GeoTrust Inc./OU=(c) 2008 GeoTrust Inc. - For authorized use only/CN=GeoTrust Primary Certification Authority - G3 Certificate chain 0 s:/C=DE/ST=Rheinland-Pfalz/L=Mainz/O=IBM Deutschland GmbH/CN=ftp.ecurep.ibm.com i:/C=US/O=GeoTrust Inc./CN=GeoTrust SHA256 SSL CA 1 s:/C=US/O=GeoTrust Inc./CN=GeoTrust SHA256 SSL CA i:/C=US/O=GeoTrust Inc./OU=(c) 2008 GeoTrust Inc. - For authorized use only/CN=GeoTrust Primary Certification Authori ty - G3 2 s:/C=US/O=GeoTrust Inc./OU=(c) 2008 GeoTrust Inc. - For authorized use only/CN=GeoTrust Primary Certification Authori ty - G3 i:/C=US/O=GeoTrust Inc./OU=(c) 2008 GeoTrust Inc. - For authorized use only/CN=GeoTrust Primary Certification Authori ty - G3 So, the instructions will work for the last 2 ecurep ftp servers: >GeoTrust certificate installation instructions >MVS (OS/390, z/OS) FTP Clients only >Please follow the directives below to establish the necessary RACF definition. >Obtain the Equifax CA certificate. >Below you will find the contents of the CURRENT Equifax CA certificate. >Current Contents of the GeoTrust Trusted Root Certificate: Equifax Secure >Certificate Authority The last 3 comments above are incorrect. The contents listed are not for the "Equifax Secure Certificate Authority" CA certificate. The contents are for the "GeoTrust Primary Certification Authority - G3" CA certificate. The "Equifax Secure Certificate Authority" CA certificate contents would be: -----BEGIN CERTIFICATE----- MIIDIDCCAomgAwIBAgIENd70zzANBgkqhkiG9w0BAQUFADBOMQswCQYDVQQGEwJV UzEQMA4GA1UEChMHRXF1aWZheDEtMCsGA1UECxMkRXF1aWZheCBTZWN1cmUgQ2Vy dGlmaWNhdGUgQXV0aG9yaXR5MB4XDTk4MDgyMjE2NDE1MVoXDTE4MDgyMjE2NDE1 MVowTjELMAkGA1UEBhMCVVMxEDAOBgNVBAoTB0VxdWlmYXgxLTArBgNVBAsTJEVx dWlmYXggU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eTCBnzANBgkqhkiG9w0B AQEFAAOBjQAwgYkCgYEAwV2xWGcIYu6gmi0fCG2RFGiYCh7+2gRvE4RiIcPRfM6f BeC4AfBONOziipUEZKzxa1NfBbPLZ4C/QgKO/t0BCezhABRP/PvwDN1Dulsr4R+A cJkVV5MW8Q+XarfCaCMczE1ZMKxRHjuvK9buY0V7xdlfUNLjUA86iOe/FP3gx7kC AwEAAaOCAQkwggEFMHAGA1UdHwRpMGcwZaBjoGGkXzBdMQswCQYDVQQGEwJVUzEQ MA4GA1UEChMHRXF1aWZheDEtMCsGA1UECxMkRXF1aWZheCBTZWN1cmUgQ2VydGlm aWNhdGUgQXV0aG9yaXR5MQ0wCwYDVQQDEwRDUkwxMBoGA1UdEAQTMBGBDzIwMTgw ODIyMTY0MTUxWjALBgNVHQ8EBAMCAQYwHwYDVR0jBBgwFoAUSOZo+SvSspXXR9gj IBBPM5iQn9QwHQYDVR0OBBYEFEjmaPkr0rKV10fYIyAQTzOYkJ/UMAwGA1UdEwQF MAMBAf8wGgYJKoZIhvZ9B0EABA0wCxsFVjMuMGMDAgbAMA0GCSqGSIb3DQEBBQUA A4GBAFjOKer89961zgK5F7WF0bnj4JXMJTENAKaSbn+2kmOeUJXRmm/kEd5jhW6Y 7qj/WsjTVbJmcVfewCHrPSqnI0kBBIZCe/zuf6IWUrVnZ9NA2zsmWLIodz2uFHdh 1voqZiegDfqnc1zqcPGUIWVEX/r87yloqaKHee9570+sB3c4 -----END CERTIFICATE----- -- Donald J. [email protected] On Wed, Sep 7, 2016, at 02:02 PM, John Eells wrote: > Dyck, Lionel B. , TRA wrote: > > Is there a way to use FTP TLS from z/OS to testcase.boulder.ibm.com to > > upload dumps/etc. ? > > Both testcase and ecurep are supposed to support FTPS and SFTP. See > this page for instructions: > > http://www-05.ibm.com/de/support/ecurep/send_ftp.html#ftps > > > -- > John Eells > IBM Poughkeepsie > [email protected] > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN -- http://www.fastmail.com - The way an email service should be ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
