GSKKYMAN and Windows FTPS



Post anything related to mainframes (IBM & UNISYS) if not fit in any of the above categories

GSKKYMAN and Windows FTPS

Postby FairwaysHateMe » Fri Jun 14, 2013 11:49 pm

Hi,

Has anyone been able to import a self-signed cert from GSKKYMAN to a Windows machine? Windows tells me that the import was successful, but I'm still not able to connect from Windows to z/OS FTPS.

Any ideas?

Thanks!
FairwaysHateMe
 
Posts: 4
Joined: Mon Jun 03, 2013 8:56 pm
Has thanked: 0 time
Been thanked: 0 time

Re: GSKKYMAN and Windows FTPS

Postby enrico-sorichetti » Sat Jun 15, 2013 12:01 am

but I'm still not able to connect from Windows to z/OS FTPS.

unfortunately You did not post anything useful to start giving any advice.
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 2994
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 164 times

Re: GSKKYMAN and Windows FTPS

Postby Robert Sample » Sat Jun 15, 2013 12:05 am

Based upon what you have posted so far, I would start by looking at the IP address / DNS name you are using -- with no other starting point, the assumption must be that you cannot connect your Windows machine to the z/OS machine due to DNS or IP problems.
Robert Sample
Global moderator
 
Posts: 3719
Joined: Sat Dec 19, 2009 8:32 pm
Location: Dubuque, Iowa, USA
Has thanked: 1 time
Been thanked: 279 times

Re: GSKKYMAN and Windows FTPS

Postby FairwaysHateMe » Sat Jun 15, 2013 12:36 am

Sorry for being vague...

I am able to connect from the Windows FTP client to the z/OS FTPS server but I get the following error message:

Command: AUTH TLS
Response: 234 Security environment established - ready for negotiation
Status: Initializing TLS...
Error: GnuTLS error -12: A TLS fatal alert has been received.
Error: Could not connect to server

It looks seems to be that the certificate isn't correct. Or am I missing another step? I exported the key in GSKKYMAN, downloaded it on the Windows client, imported it using MMC.

Going from z/OS client to z/OS server works perfectly. No issues.
FairwaysHateMe
 
Posts: 4
Joined: Mon Jun 03, 2013 8:56 pm
Has thanked: 0 time
Been thanked: 0 time

Re: GSKKYMAN and Windows FTPS

Postby NicC » Sat Jun 15, 2013 1:50 pm

And the people who really can help you (your networking group) say...?
The problem I have is that people can explain things quickly but I can only comprehend slowly.
Regards
Nic
NicC
Global moderator
 
Posts: 3025
Joined: Sun Jul 04, 2010 12:13 am
Location: Pushing up the daisies (almost)
Has thanked: 4 times
Been thanked: 136 times

Re: GSKKYMAN and Windows FTPS

Postby FairwaysHateMe » Mon Jun 17, 2013 4:43 pm

Thanks for the responses.

I do not think this is a network issue, it may be an understanding of what type of encoding that works for a MS Windows platform issue. The reason why it may not be an issue is because, the connectivity is made, however the certificate handshake fails. There is a successful handshake with another z/OS system, but not one with Windows client.
FairwaysHateMe
 
Posts: 4
Joined: Mon Jun 03, 2013 8:56 pm
Has thanked: 0 time
Been thanked: 0 time

Re: GSKKYMAN and Windows FTPS

Postby FairwaysHateMe » Wed Jun 19, 2013 5:29 pm

Just to update this...

I found the issue to be that the SITE certificate was not signed by the CA Certificate. This caused for a mismatch in the certificates during authentication negotiations.
FairwaysHateMe
 
Posts: 4
Joined: Mon Jun 03, 2013 8:56 pm
Has thanked: 0 time
Been thanked: 0 time


Return to All other Mainframe Topics

 


  • Related topics
    Replies
    Views
    Last post