04-02-2012
Query: How to install commercial cert into AIX and use it for FTPS connection
Hi Techies,
I wish to check with everyone here something regarding Configuration of FTPS Server in AIX using Commercial Digital Cert instead of Sel Sign Cert.
I'm working as system integration designer and I'm currently working on a interface which involves integration btw two systems using an integration middleware. Basically I need I need to establish a FTPS (SSL) connection from the middleware to a FTP Server Deamon Running in a IBM AIX box.
The system owner of the AIX has already configured the FTP Server using Self Sign Cert and the middleware is able to establish FTPS connection.
However to satisfy the internal security requirement, we were requested to a CA signed Cert, such as verisign or trustis instead of self sign cert for the FTPS connection.
Hence we have generated a CSR from the AIX machine and generated a CA cert and used the cert in the place of the self signed cert. However the FTPS connection is not working using this CA cert. Even a local FTP -s localhost connection is not working.
Can anyone suggest the right way to get this working. Do we need to import and configure the CA root cert and the public key?
I'm struggling with this for almost a month now, hope some of you can guide me in this. Thanks
Regards
Muraly
9 More Discussions You Might Find Interesting
1. AIX
I'm currently investigating the secure ftp connection from AIX using shell script - It looks openssl is already install and don't know command to be used to connect the secure ftp server.
1. Do I need to install certificate on AIX ?.
2. If any one already design the script to connect secure... (0 Replies)
Discussion started by: dharanir
0 Replies
2. AIX
Hi,
a friend of mine passed there 223 last year and they gave me there testkiller document which was 65 questions, i am looking at doing my 223 exam and i have gone to testkiller recently and noticed there is an updated version which is now 383 questions.
I did the ibm pre-exam and all the... (1 Reply)
Discussion started by: rorted
1 Replies
3. UNIX for Dummies Questions & Answers
I wrote a very simple script to calculate the DB connection from an appserver and check the total netstat connection to a particular DB exceed 25 then it will send mail
netstat -a 2> /dev/null | awk '/.*ESTAB/{print $5}' | cut -d. -f1 | uniq -c | awk '{if ($1 > 25)print $2," exceed ",$1;}'
... (1 Reply)
Discussion started by: senthil.ak
1 Replies
4. AIX
I have created a .bff package for an app to tbe installed on AIX servers across regions. I am pretty new to the AIX mode of packaging using mkinstallp but I have been able to get the same done. I installed the same on the server in which i created the package and the application was deployed... (9 Replies)
Discussion started by: jobbyjoseph
9 Replies
5. Shell Programming and Scripting
Hi
I'm trying to create a connection with DB from shell script using the following string
sqlplus <user>@<db_instance>/<password>
in which I'm successful.
However, after connecting to DB it is giving me a sql prompt as follows
=====================
Connected to:
Oracle Database 10g... (2 Replies)
Discussion started by: sainisumit1
2 Replies
6. Emergency UNIX and Linux Support
Hi,
I'm trying to get a self-signed cert created on AIX 6.1, and it's not cooperating. I run the following command: gsk7cmd -cert -create -db /bin/A_CACertsOnly.kdb -pw blahblah -label testing -dn cn=machinename -expire 1000 -ca true...and get this response:
The function is not supported for... (3 Replies)
Discussion started by: tekster2
3 Replies
7. UNIX for Dummies Questions & Answers
Hi,
I'm trying to access to FTP SERVER over SSL with this script unix :
(credentials are correct)
#!/usr/bin/ksh
USER="test"
PASSWORD="pwdtest"
IP="**.***.*.***"
ftp -s $IP 990 << EOF >>log_ftp
user $USER $PASSWORD
bin
passive
EOF
but seems that credentials are not passed... (2 Replies)
Discussion started by: nash83
2 Replies
8. Shell Programming and Scripting
I have a requirement for which I had to connect to a server using FTPS. I have been provided with these,
connection method: FTPS
Server Name
Port for explicit and implicit
Login user
I would like to know the FTPS command/script in order to connect to there server and get a file.
... (5 Replies)
Discussion started by: r@v!7*7@
5 Replies
9. UNIX for Advanced & Expert Users
Hi,
I am working on an application which runs on an Informatica Red-Hat 5.10 Linux Server.
The application involves several Informatica ETL workflows which generate 100s of Text files with lot of data. Many of the files will each be up to 5 GB in size.
Currently the Informatica server itself... (7 Replies)
Discussion started by: waavman
7 Replies
LEARN ABOUT PHP
openssl_x509_checkpurpose
OPENSSL_X509_CHECKPURPOSE(3) 1 OPENSSL_X509_CHECKPURPOSE(3)
openssl_x509_checkpurpose - Verifies if a certificate can be used for a particular purpose
SYNOPSIS
int openssl_x509_checkpurpose (mixed $x509cert, int $purpose, [array $cainfo = array()], [string $untrustedfile])
DESCRIPTION
openssl_x509_checkpurpose(3) examines a certificate to see if it can be used for the specified $purpose.
PARAMETERS
o $x509cert
- The examined certificate.
o $purpose
-
openssl_x509_checkpurpose(3) purposes
+---------------------------+---------------------------------------------------+
| Constant | |
| | |
| | Description |
| | |
+---------------------------+---------------------------------------------------+
| X509_PURPOSE_SSL_CLIENT | |
| | |
| | Can the certificate be used for the client side |
| | of an SSL connection? |
| | |
| X509_PURPOSE_SSL_SERVER | |
| | |
| | Can the certificate be used for the server side |
| | of an SSL connection? |
| | |
|X509_PURPOSE_NS_SSL_SERVER | |
| | |
| | Can the cert be used for Netscape SSL server? |
| | |
| X509_PURPOSE_SMIME_SIGN | |
| | |
| | Can the cert be used to sign S/MIME email? |
| | |
|X509_PURPOSE_SMIME_ENCRYPT | |
| | |
| | Can the cert be used to encrypt S/MIME email? |
| | |
| X509_PURPOSE_CRL_SIGN | |
| | |
| | Can the cert be used to sign a certificate revo- |
| | cation list (CRL)? |
| | |
| X509_PURPOSE_ANY | |
| | |
| | Can the cert be used for Any/All purposes? |
| | |
+---------------------------+---------------------------------------------------+
These options are not bitfields - you may specify one only!
o $cainfo
-$cainfo should be an array of trusted CA files/dirs as described in Certificate Verification.
o $untrustedfile
- If specified, this should be the name of a PEM encoded file holding certificates that can be used to help verify the certifi-
cate, although no trust is placed in the certificates that come from that file.
RETURN VALUES
Returns TRUE if the certificate can be used for the intended purpose, FALSE if it cannot, or -1 on error.
PHP Documentation Group OPENSSL_X509_CHECKPURPOSE(3)