Re: IBM SMTP Sever SSL CA Issue

It's like I've said.. people do stuff, but don't know why.. especially when
it comes to email or SSL.

Also, they should have called Gumbo for support... but they were told to
call me by a member on this list.  I know they did say they didn't have IBM
support and Gumbo would have probably told thim it's an IBM issue.  :)

Thanks for the referral, Jim!  Most likely, I made a new customer.  And
also realize why over 25 years ago I rolled my own email client... I hate
dealing with the IBM SMTP server.  But I see they've added some new
features (or at least made them easier to get to) that mimick MAILTOOL.

On Thu, Jul 16, 2026 at 2:54 PM Pete Helgren <[email protected]> wrote:

> Might be that they don't have a clear understanding of a CA ROOT and
> intermediates.  I would have guessed that removing all but the cert
> assignment  would work if the CA cert was in the certificate store as well.
>
> Interesting config...
>
> Pete Helgren
> www.petesworkshop.com
> CISSP - MSCM
> GIAC Cloud Penetration Tester
> AWS Certified Cloud Practitioner
> Microsoft Certified: Azure Fundamentals
>
> On 7/16/2026 12:46 PM, Brad Stone wrote:
> > I think I figured it out.  For some reason they had 5 different CAs
> > assigned to the SMTP client application in DCM.  I removed all but the 2
> > really needed and things seem to be flowing again.
> >
> > That's so weird.  I never assign CAs to a client application... they also
> > have a certificate assigned to it for some reason too.  *shrug*
> >
> > On Thu, Jul 16, 2026 at 12:19 PM Brad Stone <[email protected]> wrote:
> >
> >> I am helping a customer with an email issue.  They are using the
> SPOOLMAIL
> >> and apparently the emails are sent with the IBM SMTP server.
> >>
> >> when I use WRKSMTPEMM I see the emails as non deliverable.  I see in the
> >> log this error:
> >>
> >> Secure socket init failed:6000(Certificate is not signed by a trusted
> >> certificate authority.)
> >>
> >> I used openssl to get the certificate of the server and imported the
> >> chain.  I stopped and restarted SMTP server and tried to resend.  Got
> the
> >> same error.
> >>
> >> I also tried using MAILTOOL and turned on settings to not ignore "not
> >> trusted" errors and have no issue there at all.  It's not complaining at
> >> all.  It's using GSK APIs.. not sure what IBM is using.
> >>
> >> any ideas?
> >>
> >> Bradley V. Stone
> >> www.bvstools.com
> >> Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any
> >> Cloud Provider!
> >>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact [email protected] for any subscription related
> questions.
>
>
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact [email protected] for any subscription related questions.