Re: [Tn5250j-general] SSL support
Hey Guys, Turns out my issue was that the ssl port on the 400 is not turned on. We are getting a new iseries box soon and I will test that once we have it all setup. Thanks! Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Fri, July 8, 2005 1:30 am, Kenneth Pouncey wrote: Richard and Pete I just tested from my base here and all worked fine for connecting. It asked me to accept the certificate and then created a SSL link using both SSL2 and TLS. Not sure what the problem is. Oh and this was straight from CVS. I wonder if maybe it is the build file not including everthing or maybe we need to add another jar to the classpath. Interesting though. Anybody have any other information about this problem if they are using it? Regards Kenneth Pete Helgren wrote: There is a pretty good setup article in the IBM iSeries knowledge base. http://www-912.ibm.com/s_dir/slkbase.nsf/slkbase Search using 17615517 (the document number) you should have a hit on SSL and Secure Telnet Server Configuration. Make sure you have the correct licensed programs installed (Cryptographic Access Provider and Digital Certificate Manager). The Mochasoft site has a good overview as well. (http://www.mochasoft.dk/tn5250.htm) It has been a little while since I have set this up but I'll give you help where ever I can. Once the Certificate is set up and assigned to telnet, you just want to make sure that your telnet settings allow SSL (CHGTELNA ALWSSL (*YES) ) The SSLInstructions.html just has this: - /Tested with Sun JRE 1.4.0_01-b03 http://java.sun.com on Win2K XP/ *Security Policy File Installation* 1. Download Security Policy java.policy file:///c:/Program%20Files/tn5250j/java.policy. 2. Read Instructions in java.policy to install/setup policy file. 3. Restart Browser That is about it. Pete Richard Houston wrote: Thanks Pete, Do you know where that doc is? Sorry for my ignorance here. :/ Also do we know if the ssl 5250 port is on by default on the AS/400 or do we need to turn it on? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 1:55 pm, Pete Helgren wrote: This works for me in 0.5.7 pre3. When I start the session I am prompted to accept the SSL cert and then I get the signon screen. It was been quite a while since I set this up but I don't recall doing much more than just following the SSLInstructions.html document. Pete Richard Houston wrote: Yeah, the no connect error is the same thing I got. Kenneth, do you have any insight on how to get the ssl working? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 12:55 am, Patrick Bielen wrote: Hi Richard, Does anyone have a good howto on getting ssl support on tn5250j to work? Well i never got it running here at stafa. When i enable it i get no connect, so i never even tried it again. Maybe there is somebody else with better luck. Met vriendelijke groeten, Best Regards, Patrick Bielen System-Administrator Stafa Holland BV Microsoft Certified Professional Sun Certified Java Programmer --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general ---
Re: [Tn5250j-general] SSL support
Richard and Pete I just tested from my base here and all worked fine for connecting. It asked me to accept the certificate and then created a SSL link using both SSL2 and TLS. Not sure what the problem is. Oh and this was straight from CVS. I wonder if maybe it is the build file not including everthing or maybe we need to add another jar to the classpath. Interesting though. Anybody have any other information about this problem if they are using it? Regards Kenneth Pete Helgren wrote: There is a pretty good setup article in the IBM iSeries knowledge base. http://www-912.ibm.com/s_dir/slkbase.nsf/slkbase Search using "17615517" (the document number) you should have a hit on "SSL and Secure Telnet Server Configuration". Make sure you have the correct licensed programs installed (Cryptographic Access Provider and Digital Certificate Manager). The Mochasoft site has a good overview as well. (http://www.mochasoft.dk/tn5250.htm) It has been a little while since I have set this up but I'll give you help where ever I can. Once the Certificate is set up and assigned to telnet, you just want to make sure that your telnet settings allow SSL (CHGTELNA ALWSSL (*YES) ) The SSLInstructions.html just has this: - Tested with Sun JRE 1.4.0_01-b03 on Win2K XP Security Policy File Installation 1. Download Security Policy java.policy. 2. Read Instructions in java.policy to install/setup policy file. 3. Restart Browser That is about it. Pete Richard Houston wrote: Thanks Pete, Do you know where that doc is? Sorry for my ignorance here. :/ Also do we know if the ssl 5250 port is on by default on the AS/400 or do we need to turn it on? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 1:55 pm, Pete Helgren wrote: This works for me in 0.5.7 pre3. When I start the session I am prompted to accept the SSL cert and then I get the signon screen. It was been quite a while since I set this up but I don't recall doing much more than just following the SSLInstructions.html document. Pete Richard Houston wrote: Yeah, the no connect error is the same thing I got. Kenneth, do you have any insight on how to get the ssl working? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 12:55 am, Patrick Bielen wrote: Hi Richard, Does anyone have a good howto on getting ssl support on tn5250j to work? Well i never got it running here at stafa. When i enable it i get no connect, so i never even tried it again. Maybe there is somebody else with better luck. Met vriendelijke groeten, Best Regards, Patrick Bielen System-Administrator Stafa Holland BV Microsoft Certified Professional Sun Certified Java Programmer --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general
Re: [Tn5250j-general] SSL support
Hello all Have been away. I will take a look at the SSL to see if it works. Regards Kenneth Pete Helgren wrote: There is a pretty good setup article in the IBM iSeries knowledge base. http://www-912.ibm.com/s_dir/slkbase.nsf/slkbase Search using "17615517" (the document number) you should have a hit on "SSL and Secure Telnet Server Configuration". Make sure you have the correct licensed programs installed (Cryptographic Access Provider and Digital Certificate Manager). The Mochasoft site has a good overview as well. (http://www.mochasoft.dk/tn5250.htm) It has been a little while since I have set this up but I'll give you help where ever I can. Once the Certificate is set up and assigned to telnet, you just want to make sure that your telnet settings allow SSL (CHGTELNA ALWSSL (*YES) ) The SSLInstructions.html just has this: - Tested with Sun JRE 1.4.0_01-b03 on Win2K XP Security Policy File Installation 1. Download Security Policy java.policy. 2. Read Instructions in java.policy to install/setup policy file. 3. Restart Browser That is about it. Pete Richard Houston wrote: Thanks Pete, Do you know where that doc is? Sorry for my ignorance here. :/ Also do we know if the ssl 5250 port is on by default on the AS/400 or do we need to turn it on? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 1:55 pm, Pete Helgren wrote: This works for me in 0.5.7 pre3. When I start the session I am prompted to accept the SSL cert and then I get the signon screen. It was been quite a while since I set this up but I don't recall doing much more than just following the SSLInstructions.html document. Pete Richard Houston wrote: Yeah, the no connect error is the same thing I got. Kenneth, do you have any insight on how to get the ssl working? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 12:55 am, Patrick Bielen wrote: Hi Richard, Does anyone have a good howto on getting ssl support on tn5250j to work? Well i never got it running here at stafa. When i enable it i get no connect, so i never even tried it again. Maybe there is somebody else with better luck. Met vriendelijke groeten, Best Regards, Patrick Bielen System-Administrator Stafa Holland BV Microsoft Certified Professional Sun Certified Java Programmer --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general
RE: [Tn5250j-general] SSL support
Yeah, the no connect error is the same thing I got. Kenneth, do you have any insight on how to get the ssl working? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 12:55 am, Patrick Bielen wrote: Hi Richard, Does anyone have a good howto on getting ssl support on tn5250j to work? Well i never got it running here at stafa. When i enable it i get no connect, so i never even tried it again. Maybe there is somebody else with better luck. Met vriendelijke groeten, Best Regards, Patrick Bielen System-Administrator Stafa Holland BV Microsoft Certified Professional Sun Certified Java Programmer --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general
Re: [Tn5250j-general] SSL support
This works for me in 0.5.7 pre3. When I start the session I am prompted to accept the SSL cert and then I get the signon screen. It was been quite a while since I set this up but I don't recall doing much more than just following the SSLInstructions.html document. Pete Richard Houston wrote: Yeah, the no connect error is the same thing I got. Kenneth, do you have any insight on how to get the ssl working? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 12:55 am, Patrick Bielen wrote: Hi Richard, Does anyone have a good howto on getting ssl support on tn5250j to work? Well i never got it running here at stafa. When i enable it i get no connect, so i never even tried it again. Maybe there is somebody else with better luck. Met vriendelijke groeten, Best Regards, Patrick Bielen System-Administrator Stafa Holland BV Microsoft Certified Professional Sun Certified Java Programmer --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general
Re: [Tn5250j-general] SSL support
Thanks Pete, Do you know where that doc is? Sorry for my ignorance here. :/ Also do we know if the ssl 5250 port is on by default on the AS/400 or do we need to turn it on? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 1:55 pm, Pete Helgren wrote: This works for me in 0.5.7 pre3. When I start the session I am prompted to accept the SSL cert and then I get the signon screen. It was been quite a while since I set this up but I don't recall doing much more than just following the SSLInstructions.html document. Pete Richard Houston wrote: Yeah, the no connect error is the same thing I got. Kenneth, do you have any insight on how to get the ssl working? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 12:55 am, Patrick Bielen wrote: Hi Richard, Does anyone have a good howto on getting ssl support on tn5250j to work? Well i never got it running here at stafa. When i enable it i get no connect, so i never even tried it again. Maybe there is somebody else with better luck. Met vriendelijke groeten, Best Regards, Patrick Bielen System-Administrator Stafa Holland BV Microsoft Certified Professional Sun Certified Java Programmer --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general
Re: [Tn5250j-general] SSL support
There is a pretty good setup article in the IBM iSeries knowledge base. http://www-912.ibm.com/s_dir/slkbase.nsf/slkbase Search using "17615517" (the document number) you should have a hit on "SSL and Secure Telnet Server Configuration". Make sure you have the correct licensed programs installed (Cryptographic Access Provider and Digital Certificate Manager). The Mochasoft site has a good overview as well. (http://www.mochasoft.dk/tn5250.htm) It has been a little while since I have set this up but I'll give you help where ever I can. Once the Certificate is set up and assigned to telnet, you just want to make sure that your telnet settings allow SSL (CHGTELNA ALWSSL (*YES) ) The SSLInstructions.html just has this: - Tested with Sun JRE 1.4.0_01-b03 on Win2K XP Security Policy File Installation 1. Download Security Policy java.policy. 2. Read Instructions in java.policy to install/setup policy file. 3. Restart Browser That is about it. Pete Richard Houston wrote: Thanks Pete, Do you know where that doc is? Sorry for my ignorance here. :/ Also do we know if the ssl 5250 port is on by default on the AS/400 or do we need to turn it on? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 1:55 pm, Pete Helgren wrote: This works for me in 0.5.7 pre3. When I start the session I am prompted to accept the SSL cert and then I get the signon screen. It was been quite a while since I set this up but I don't recall doing much more than just following the SSLInstructions.html document. Pete Richard Houston wrote: Yeah, the no connect error is the same thing I got. Kenneth, do you have any insight on how to get the ssl working? Best regards, +--+ | Richard Houston .^. | | R.L.H. Consulting /V\ | | E-Mail [EMAIL PROTECTED]/( )\ | | WWW www.rlhc.net ^^-^^| +--+ On Wed, July 6, 2005 12:55 am, Patrick Bielen wrote: Hi Richard, Does anyone have a good howto on getting ssl support on tn5250j to work? Well i never got it running here at stafa. When i enable it i get no connect, so i never even tried it again. Maybe there is somebody else with better luck. Met vriendelijke groeten, Best Regards, Patrick Bielen System-Administrator Stafa Holland BV Microsoft Certified Professional Sun Certified Java Programmer --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Tn5250j-general mailing list Tn5250j-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tn5250j-general
