Add external CA to trust list - Revision history

Pavel.lobko at 07:39, 14 April 2020

2020-04-14T07:39:16Z

Pavel.lobko at 07:38, 14 April 2020

2020-04-14T07:38:25Z

Pavel.lobko at 12:23, 13 April 2020

2020-04-13T12:23:59Z

Pavel.lobko: Pavel.lobko moved page Adding SSL certificate to Add external CA to trust list without leaving a redirect

2020-04-13T11:59:07Z

Pavel.lobko moved page Adding SSL certificate to Add external CA to trust list without leaving a redirect

Pavel.lobko at 11:57, 13 April 2020

2020-04-13T11:57:14Z

Pavel.lobko at 11:54, 13 April 2020

2020-04-13T11:54:30Z

Pavel.lobko: Created page with "When using the i2Rest Client to access external https resources, you might meet error "Certificate is not signed by a trusted certificate authority". In this case you will hav..."

2020-04-13T09:52:30Z

Created page with "When using the i2Rest Client to access external https resources, you might meet error "Certificate is not signed by a trusted certificate authority". In this case you will hav..."

New page

When using the i2Rest Client to access external https resources, you might meet error "Certificate is not signed by a trusted certificate authority". In this case you will have to add the root CA certificate of the target server to the list of trusted certificates in DCM.

Here is one of ways to get the server's root CA certificate and register it in the DCM trust list.

DCM requires root CA certificate in PEM format. If you already have such file, you have to save it to IBM i directory and can go to step 8.

Using Firefox:

1. Open required page in Firefox:

[[attachment:Google - Mozilla Firefox 24.03.2020 12_42_43.png|{{attachment:Google - Mozilla Firefox 24.03.2020 12_42_43.png||width=400}}]]

2. Click Lock icon and click Show connection details

[[attachment:Google keys.PNG|{{attachment:Google keys.PNG||width=400}}]]

3. Click More information:

[[attachment:Page Info - https___www.google.com_ 24.03.2020 12_51_50.png|{{attachment:Page Info - https___www.google.com_ 24.03.2020 12_51_50.png||width=400}}]]

4. View Certificate:

[[attachment:about_certificate - Mozilla Firefox 24.03.2020 12_53_43.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 12_53_43.png||width=400}}]]

5. Open rightmost tab with root CA authority:

[[attachment:about_certificate - Mozilla Firefox 24.03.2020 13_56_33.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 13_56_33.png||width=400}}]]

6. Scroll down and click on link Download PEM (Cert), save downloaded file:

[[attachment:Save PEM cert.PNG|{{attachment:Save PEM cert.PNG||width=400}}]]

7. Copy downloaded file to your IBM i folder, for example to /tmp/www-google-com.pem

8. Close opened page and go to [[Open *SYSTEM Certificate Store|DCM *SYSTEM store]]

9. Go to Manage Certificates and click Import Certificate:

[[attachment:about_certificate - Mozilla Firefox 24.03.2020 13_05_59.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 13_05_59.png||width=400}}]]

10. Select Certificate Authority (CA) and press Continue:

[[attachment:about_certificate - Mozilla Firefox 24.03.2020 13_28_05.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 13_28_05.png||width=400}}]]

11. Enter path to downloaded chain file (at IBM i) and click Continue:

[[attachment:about_certificate - Mozilla Firefox 24.03.2020 13_16_57.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 13_16_57.png||width=400}}]]

12. Enter certificate label for imported CA (up to you, don't have to be the same as CA common name):

[[attachment:about_certificate - Mozilla Firefox 24.03.2020 13_19_51.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 13_19_51.png||width=400}}]]

13. Press Continue:

[[attachment:about_certificate - Mozilla Firefox 24.03.2020 14_01_56.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 14_01_56.png||width=400}}]]

Certificate imported.

@@ Line 11: / Line 11: @@
 . Open required page in Firefox:
-[[File:Add_external_CA_to_trust_list_step1.png|500px]]
+[[File:Add_external_CA_to_trust_list_step1.png|600px]]
 . Click Lock icon and click Show connection details
-[[File:Add_external_CA_to_trust_list_step2.png|500px]]
+[[File:Add_external_CA_to_trust_list_step2.png|600px]]
 . Click More information:
-[[File:Add_external_CA_to_trust_list_step3.png|500px]]
+[[File:Add_external_CA_to_trust_list_step3.png|600px]]
 . View Certificate:
-[[File:Add_external_CA_to_trust_list_step4.png|500px]]
+[[File:Add_external_CA_to_trust_list_step4.png|600px]]
 . Open rightmost tab with root CA authority:
-[[File:Add_external_CA_to_trust_list_step5.png|500px]]
+[[File:Add_external_CA_to_trust_list_step5.png|600px]]
 . Scroll down and click on link Download PEM (Cert), save downloaded file:
-[[File:Add_external_CA_to_trust_list_step6.png|500px]]
+[[File:Add_external_CA_to_trust_list_step6.png|600px]]
 . Copy downloaded file to your IBM i folder, for example to /tmp/www-google-com.pem
@@ Line 39: / Line 39: @@
 . Go to Manage Certificates and click Import Certificate:
-[[File:Add_external_CA_to_trust_list_step9.png|500px]]
+[[File:Add_external_CA_to_trust_list_step9.png|600px]]
 . Select Certificate Authority (CA) and press Continue:
-[[File:Add_external_CA_to_trust_list_step10.png|500px]]
+[[File:Add_external_CA_to_trust_list_step10.png|600px]]
 . Enter path to downloaded chain file (at IBM i) and click Continue:
-[[File:Add_external_CA_to_trust_list_step11.png|500px]]
+[[File:Add_external_CA_to_trust_list_step11.png|600px]]
 . Enter certificate label for imported CA (up to you, don't have to be the same as CA common name):
-[[File:Add_external_CA_to_trust_list_step12.png|500px]]
+[[File:Add_external_CA_to_trust_list_step12.png|600px]]
 . Press Continue:
-[[File:Add_external_CA_to_trust_list_step13.png|500px]]
+[[File:Add_external_CA_to_trust_list_step13.png|600px]]
 Certificate imported.

@@ Line 11: / Line 11: @@
 . Open required page in Firefox:
-[[File:Add_external_CA_to_trust_list_step1.png|400px]]
+[[File:Add_external_CA_to_trust_list_step1.png|500px]]
 . Click Lock icon and click Show connection details
-[[File:Add_external_CA_to_trust_list_step2.png|400px]]
+[[File:Add_external_CA_to_trust_list_step2.png|500px]]
 . Click More information:
-[[File:Add_external_CA_to_trust_list_step3.png|400px]]
+[[File:Add_external_CA_to_trust_list_step3.png|500px]]
 . View Certificate:
-[[File:Add_external_CA_to_trust_list_step4.png|400px]]
+[[File:Add_external_CA_to_trust_list_step4.png|500px]]
 . Open rightmost tab with root CA authority:
-[[File:Add_external_CA_to_trust_list_step5.png|400px]]
+[[File:Add_external_CA_to_trust_list_step5.png|500px]]
 . Scroll down and click on link Download PEM (Cert), save downloaded file:
-[[File:Add_external_CA_to_trust_list_step6.png|400px]]
+[[File:Add_external_CA_to_trust_list_step6.png|500px]]
 . Copy downloaded file to your IBM i folder, for example to /tmp/www-google-com.pem
@@ Line 39: / Line 39: @@
 . Go to Manage Certificates and click Import Certificate:
-[[File:Add_external_CA_to_trust_list_step9.png|400px]]
+[[File:Add_external_CA_to_trust_list_step9.png|500px]]
 . Select Certificate Authority (CA) and press Continue:
-[[File:Add_external_CA_to_trust_list_step10.png|400px]]
+[[File:Add_external_CA_to_trust_list_step10.png|500px]]
 . Enter path to downloaded chain file (at IBM i) and click Continue:
-[[File:Add_external_CA_to_trust_list_step11.png|400px]]
+[[File:Add_external_CA_to_trust_list_step11.png|500px]]
 . Enter certificate label for imported CA (up to you, don't have to be the same as CA common name):
-[[File:Add_external_CA_to_trust_list_step12.png|400px]]
+[[File:Add_external_CA_to_trust_list_step12.png|500px]]
 . Press Continue:
-[[File:Add_external_CA_to_trust_list_step13.png|400px]]
+[[File:Add_external_CA_to_trust_list_step13.png|500px]]
 Certificate imported.

@@ Line 11: / Line 11: @@
 . Open required page in Firefox:
-[[Add_external_CA_to_trust_list_step1.png|400px]]
+[[File:Add_external_CA_to_trust_list_step1.png|400px]]
 . Click Lock icon and click Show connection details
-[[Add_external_CA_to_trust_list_step2.png|400px]]
+[[File:Add_external_CA_to_trust_list_step2.png|400px]]
 . Click More information:
-[[Add_external_CA_to_trust_list_step3.png|400px]]
+[[File:Add_external_CA_to_trust_list_step3.png|400px]]
 . View Certificate:
-[[Add_external_CA_to_trust_list_step4.png|400px]]
+[[File:Add_external_CA_to_trust_list_step4.png|400px]]
 . Open rightmost tab with root CA authority:
-[[Add_external_CA_to_trust_list_step5.png|400px]]
+[[File:Add_external_CA_to_trust_list_step5.png|400px]]
 . Scroll down and click on link Download PEM (Cert), save downloaded file:
-[[Add_external_CA_to_trust_list_step6.png|400px]]
+[[File:Add_external_CA_to_trust_list_step6.png|400px]]
 . Copy downloaded file to your IBM i folder, for example to /tmp/www-google-com.pem
@@ Line 39: / Line 39: @@
 . Go to Manage Certificates and click Import Certificate:
-[[Add_external_CA_to_trust_list_step9.png|400px]]
+[[File:Add_external_CA_to_trust_list_step9.png|400px]]
 . Select Certificate Authority (CA) and press Continue:
-[[Add_external_CA_to_trust_list_step10.png|400px]]
+[[File:Add_external_CA_to_trust_list_step10.png|400px]]
 . Enter path to downloaded chain file (at IBM i) and click Continue:
-[[Add_external_CA_to_trust_list_step11.png|400px]]
+[[File:Add_external_CA_to_trust_list_step11.png|400px]]
 . Enter certificate label for imported CA (up to you, don't have to be the same as CA common name):
-[[Add_external_CA_to_trust_list_step12.png|400px]]
+[[File:Add_external_CA_to_trust_list_step12.png|400px]]
 . Press Continue:
-[[Add_external_CA_to_trust_list_step13.png|400px]]
+[[File:Add_external_CA_to_trust_list_step13.png|400px]]
 Certificate imported.

@@ Line 11: / Line 11: @@
 . Open required page in Firefox:
 [[Add_external_CA_to_trust_list_step1.png|400px]]
 . Click Lock icon and click Show connection details
 [[Add_external_CA_to_trust_list_step2.png|400px]]
 . Click More information:
 [[Add_external_CA_to_trust_list_step3.png|400px]]
 . View Certificate:
 [[Add_external_CA_to_trust_list_step4.png|400px]]
 . Open rightmost tab with root CA authority:
 [[Add_external_CA_to_trust_list_step5.png|400px]]
 . Scroll down and click on link Download PEM (Cert), save downloaded file:
 [[Add_external_CA_to_trust_list_step6.png|400px]]
@@ Line 45: / Line 39: @@
 . Go to Manage Certificates and click Import Certificate:
-[[attachment:about_certificate - Mozilla Firefox 24.03.2020 13_05_59.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 13_05_59.png||width=400}}]][[Add_external_CA_to_trust_list_step9.png|400px]]
+[[Add_external_CA_to_trust_list_step9.png|400px]]
 . Select Certificate Authority (CA) and press Continue:
-[[attachment:about_certificate - Mozilla Firefox 24.03.2020 13_28_05.png|{{attachment:about_certificate - Mozilla Firefox 24.03.2020 13_28_05.png||width=400}}]][[Add_external_CA_to_trust_list_step10.png|400px]]
+[[Add_external_CA_to_trust_list_step10.png|400px]]
 . Enter path to downloaded chain file (at IBM i) and click Continue:
 [[Add_external_CA_to_trust_list_step11.png|400px]]
 . Enter certificate label for imported CA (up to you, don't have to be the same as CA common name):
 [[Add_external_CA_to_trust_list_step12.png|400px]]
 . Press Continue:
 [[Add_external_CA_to_trust_list_step13.png|400px]]
 Certificate imported.

← Older revision	Revision as of 11:59, 13 April 2020
(No difference)