Please pardon the interruption for a brief comment.
In case it is not completely obvious, the Digicert acquisition of the
Geotrust CA also affects Verisign certificates. We have already encountered
this issue (last week) with another business partner that used a certificate
signed by a Verisign CA. When they renewed their cert, it was now signed by a
Digicent CA, thus requiring us to ADD a new CA certificate in order to maintain
the sessions.
If you or a business partner are using Verisign certs, you might see
this issue again..............!!!!
Hth
Tony
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Tom Conley
Sent: Tuesday, January 16, 2018 7:48 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Please Read: Server Certificates Expiring - Soon!
On 1/16/2018 4:21 PM, John Eells wrote:
> Tom Conley wrote:
>> On 1/16/2018 2:47 PM, John Eells wrote:
>>> Jousma, David wrote:
>>>> WSC has published!
>>>> http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/FLASH1
>>>> 0884
>>>
>>> Indeed, and you beat me to it! Many thanks for Kurt Quackenbush for
>>> writing it, and Riaz Ahmad for getting it formatted as a Flash and
>>> getting it posted to the WSC's website.
>>>
>>
>> I've only had the problem since 1/11/18. Good to know the alert is
>> out
>> 5 days later, grrrrrrrrrrrrrrrrrrrr.......
>>
>
> The storied West Point and Officer's Candidate School response to "Why
> did you make that mistake?" is appropriate here: "No excuse, sir."
>
> On behalf of IBM, I apologize to all for the late notification.
>
> Going forward, we are trying hard to make sure we understand and
> communicate all the impacts as rapidly as we can. The team that
> maintains the servers will probably replace the server certificates
> that expire in May some time in April. Thus far, we know of no
> impacts before April, but that's not yet any guarantee there will be
> none before that date.
>
The moral of the story is to update your CA certs ASAP per the instructions in
the Alert. I followed the directions to reinstall the new CA cert and viola!
RECEIVE ORDER began to work again, as if by magic!
Regards,
Tom Conley
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
lists...@listserv.ua.edu with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
