Thanks Charles I was just starting to look at if curl would do it. This is a TN3270 server on z/OS that I want to check what cert it is presenting to the user for a TLS connection.
J -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Charles Mills Sent: Saturday, August 26, 2023 10:42 AM To: [email protected] Subject: EXTERNAL EMAIL: Re: Retrieving Certificate details from a server Well, I wrote a product that does exactly that in a beautiful graphic fashion and is part of NewEra's ICEDirect suite. https://www.newera.com/INFO/ICEDirect.pdf Does that count? <g> For free tools 1. Is it a Web server? If so most browsers will display the server certificate and the entire chain of trust. Click on the padlock icon next to the URL and take it from there. 2. Perhaps you can do this with OpenSSL? I think so but don't know the details. 3. Can you do this with curl? Seems likely but I am not a curl expert. Charles On Sat, 26 Aug 2023 16:52:46 +0000, Jerry Whitteridge <[email protected]> wrote: >I used to use a java command to check on my certs on the mainframe > >keytool -printcert -sslserver <hostIP>:port > >but now all I get is a message > >XXXXXXX:/u/xxxxxxx:>keytool -printcert -V -sslserver yyyy.yyyyyyy.com >keytool error: java.lang.Exception: No certificate from the SSL server ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ________________________________ Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. ________________________________ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
