I am currently using openssl to create certificates for use with CICS
Web Services that work fine.  I haven't read anywhere that 
CICS Web Services supports authentication using HostIDMapping.   I
associate the certificate with a userid using command:
RACDCERT ID(USERID1) ADD('USERID1.CERT1.PEM') WITHLABEL('USERID1test')
ICSF(*) TRUST
If I try to use a certificate with a HostIDMapping extension and no
certificate associated with the userid I get error message:
"CWXN A client certificate that maps to a valid userid is required."

Did you also associate your certificate with your userid?  If so, then
the HostIDMapping extension was not needed or used.

On Mon, Mar 10, 2014, at 02:38 PM, Phil Sidler wrote:
> On Mon, 10 Mar 2014 13:49:38 -0700, Donald J. <[email protected]> wrote:
> 
> >Yes, the script helps to identify some things.  What appilcation was it
> >working with?
> 
> IIRC, this was in combination with windows certreq to build & send a cert
> request to a windows active directory server to be signed and then the
> signed cert was used for CICS web services over SSL (from a windows
> client or IE). 
> 

-- 
http://www.fastmail.fm - mmm... Fastmail...

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to