In article <[email protected]> you wrote: > On Monday, April 8, 2019 at 10:27:24 PM UTC+3, Grant Taylor wrote: > > On 4/8/19 1:22 PM, Dan Kalmar wrote: > > > I tried the same Java program on an Ubuntu system and it sends mail to > > > Gmail just fine. > > > > I take it that the Java was portable without modifications between your > > Ubuntu system and a Mainframe. - Good to know. - I should be, but > > I've not seen first hand experience before this. > > > > > So I tend to agree that CERTs are missing on RACF to enable the TLS > > > session to work properly against the Gmail server. > > > > > > I'll look around for any hints on how to get those CA certs installed > > > on RACF. > > > > Take a look at the links that Don P. posted about 8 (?) hours ago. I > > think at least one of the links had a link to adding certs to RACF keyring. > > -- > > Grant. . . . > > unix || die > I found a post where the following command would extract a certificate from > the target SMTP server: > openssl s_client -connect smtp.gmail.com:465 -showcerts </dev/null > 2>/dev/null|openssl x509 -outform PEM >mycertfile.pem > This comnmand actually works and I get a certificate created in > mycertfile.pem. > I can take this certificate and add it to RACF but not sure under what > credentials ?
You don't want to add the gmail cert to RACF, you just need the CA cert to validate it. See (this is for SMP/E, but I think also applies to your problem): https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.gim3000/acac.htm -- Don Poitras - SAS Development - SAS Institute Inc. - SAS Campus Drive [email protected] (919) 531-5637 Cary, NC 27513 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
