With the certificate chain complete, I was able to get an order built, but now the download fails > /bin/ftp -e deliverycb-bld.dhe.ibm.com > Using 'GIBNEY.FTP.DATA' for local site configuration parameters. Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the control con nection. Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the data connec tion. IBM FTP CS V2R3 FTP: using TCPIP FTP: EXIT has been set. Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages. Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21. 18:10:38(00000000.-1) SC1059 SETCEC code = 9 Connection to server interrupted or timed out. USER command failed. Switch betwe en users not accepted as anonymouslevel = 3 18:10:38(00000000.-1) SC0644 initConnection: returning -1 to caller 18:10:38(00000000.-1) PC0945 setClientRC: entered 18:10:38(00000000.-1) PC1015 setClientRC: std_rc=10000, rc_type=STD, rc=10000 Std Return Code = 10000, Error Code = 00008 > QUIT > GIM69233I FTP FAILED, ATTEMPT 01 OF 10. FTP WILL BE RETRIED IN 60 SECONDS.
The ordering connection is HTTPS, but the download seems to still be FTP. > -----Original Message----- > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > Behalf Of Gibney, Dave > Sent: Monday, January 24, 2022 3:18 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: RECEIVE ORDER > > I suspect I don't. I used to do this work from a different sandbox. Thank you > for the link, I couldn't find it myself > > > -----Original Message----- > > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > > Behalf Of Kurt J. Quackenbush > > Sent: Monday, January 24, 2022 3:15 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: RECEIVE ORDER > > > > > RECEIVE PROCESSING HAS FAILED BECAUSE THE CONNECTION WITH THE > > > SERVER FAILED. javax.net.ssl.SSLHandshakeException: > > > com.ibm.jsse2.util.h: PKIX path building failed: > > > com.ibm.security.cert.IBMCertPathBuilderException: unable to find > > > valid certification path to requested target > > > > Ah hah, now that's a CA certificate issue. Be sure you've got the > > DigiCert Global Root CA in your keyring. You can read about that here: > > > https://urldefense.com/v3/__https://www.ibm.com/docs/en/zos/2.5.0?top > > ic=racf-displaying-certificate-authority- > > > certificates__;!!JmPEgBY0HMszNaDT!6FCqXcNHAoe7owl6gpSb95fPI0oreeioX > > -bamRwz-r9QMAPh7cqW2DPLdSDn1w$ > > > > Kurt Quackenbush -- IBM, z/OS SMP/E and z/OSMF Software Management > > Chuck Norris never uses CHECK when he applies PTFs. > > > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN