Ulrich, I have created the Certificates / Keyring using the jobs from the Communications Server for z/OS 1.6 TCP/IP Implementation Guide Volume 7: Security pages 212 --> so I am sure that they are self-signed.
Regards Herbie -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Ulrich Boche Sent: 27 January 2006 14:30 To: IBM-MAIN@BAMA.UA.EDU Subject: Re: TN3270 SSL connections Van Dalsen, Herbie wrote: > Hi all, > > I please need a bit of advice. > > I looked at one of the previous messages on the lis concerning my error I am getting, and my cenario seems just a little different in that I am using a RACF KeyRing. > I did a Refresh of the DIGTRING and DIGTCERT classes in RACF. > TCPIP has read access to the IRR.DIGT*.LISTRING and IRR.DIGT*.LIST. > > Personally, I am convinced that I must have missed something in the set-up chain, but just cannot spot it. > > Below is pieces I copied from the previous listserv message and modified to look like my own. > > Hope there is someone using RACF to do this. > > Regards > > Herbie > > EZZ6035I TELNET DEBUG PROFILE WARNING,LINE:*N/A* MOD: EZBTMCVV 934 > RCODE: 600F-00 System SSL initiation failed. > PARM1: PARM2: PARM3: GSK_ENVIRONMENT_INIT > EZZ6040I TELNET PROFILE UPDATE FAILED FOR PORT 923, RCODE=600F > > TelnetParms > SECUREPORT 923 > KEYRING SAF ECD1TCPIP > EndTelnetParms > Also make sure that the CA certificate for your server's certificate is connected to the key ring (if the server certificate is not truly self-signed). -- Ulrich Boche SVA GmbH, Germany IBM Premier Business Partner ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ********************************************************************************************* This email and any attachments are confidential and intended for the sole use of the intended recipient(s).If you receive this email in error please notify [EMAIL PROTECTED] and delete it from your system. Any unauthorized dissemination, retransmission, or copying of this email and any attachments is prohibited. Euroconex does not accept any responsibility for any breach of confidence, which may arise from the use of email. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the Company. This message has been scanned for known computer viruses. ********************************************************************************************* ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
