On Fri, 3 Feb 2017 07:58:24 -0600, Kirk Wolf <[email protected]> wrote:

>Standard SSH/SFTP doesn't support X.509 certificate's for authentication,

Doesn't it? I didn't know that...

>(z/OS OpenSSH does allow you to put SSH public and private keys in a Key
>Ring Certificate, but only the keys are used; the certificate and its
>signature are irrelevant.)

OK, so then I need a trustworthy channel to get me the public key. Still an 
issue of trust, but a different one, I expect.

Cheers,

Jantje.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to