I have a certificate signed by an intermediate CA that is self signed (the CA certificate). The certificate CN is not specific for a client. Now I installed it on Z?OS RACF and it works with no problem against a server having a server certificate from the same CA. Now I installed the same certificate on Z/VM (gskyman) and tried to connect to the same server. The certificate is refused and the server asks for renegotiating (which is impossible at TLS 1.2).
Why does that happen? Both certificates are marked TRUSTED. ITschak *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux and IBM I **| * *|* *Email**: [email protected] **|* *Mob**: +972 522 986404 **|* *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
