Re: [CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Rob van der Heij
On Thu, 7 Apr 2022 at 20:04, Dave Jones wrote: > Yeah, that works even better. > Trying to make it a full week without disagreeing with Alan, let me just complement his post... Indeed, certificates these days have the hostname in the Subject Alternate Name extension.Just like your browser, the

Re: [CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Dave Jones
Yeah, that works even better. DJ --- BEST REGARDS DAVE JONES IBM CHAMPION [1] Managing Director for zSystems Support, zLinux, and Cloud ++1 281.578.7544 (Cell) Web: www.itconline.com [2] 18502 Purdy Ct. Houston, TX 77084 USA On 04.07.2022 10:36 AM, Ala

Re: [CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Alan Altmark
You don't need DNS, unless you want it. Look for /etc/hosts file or equivalent.. Regards, Alan Alan Altmark Senior Managing z/VM Consultant IBM Systems Lab Services 1 607 321 7556 Mobile alan_altm...@us.ibm.com > -Original Message- > From: CMSTSO Pipelines Discussion List > On Behalf

Re: [CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Dave Jones
Thanks for that explanation, Alan. I really haven't been keeping up with all of the latest rules and regs for security. Maybe I need to figure out how to run my own DNS here so I can map things like names to local IP addresses. Take care. DJ --- BEST REGARDS DAVE JONES

Re: [CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Alan Altmark
As an aside, when using TLS, you should be using the host name, not the IP address in a client. A browser like FF will validate what you typed against what is in the server certificate and they won't match, so you'll get a warning. That's fine for interactive applications, but not so much for

Re: [CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Dave Jones
OK, I found the problem, due to Rob's suggestion. If I point Firefox to this URL: https://192.168.128.118:2080/ it works as designed. I was just using 192.168.128.118:2080 before. Many thanks. DJ --- BEST REGARDS DAVE JONES IBM CHAMPION [1] Managing Director for z

Re: [CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Rob van der Heij
On Thu, 7 Apr 2022 at 16:02, Dave Jones wrote: > > FPLTCQ1015E ERRNO 10410: 10410 > FPLMSG004I ... Issued from stage 3 of pipeline 3 name "WEENYWEB.REXX:7" > FPLMSG001I ... Running "tcpdata TLSLABEL SMBSSI" > > Turns out that the SSL error number 410 means "SSL message format is > incorrect.". >

[CMS-PIPELINES] SSL/TLS question with tcpdata

2022-04-07 Thread Dave Jones
Hello, all. I am trying to add SSL/TLS support to Sir Rob's weenyweb application. I simply added the parameters TLSLABEL SMBSSI to the tcpdata stage on line 22 in the WEENYWEB REXX file. Weenyweb starts up as it should but when I point a web browser (here Firefox on Linux) at it I get a number of