Re: IBM SMTP Sever SSL CA Issue

Just click and pray.. :)

On Thu, Jul 16, 2026 at 4:49 PM Jim Oberholtzer <[email protected]>
wrote:

> this customer has non-IBM i guys running it, hence the lack of
> understanding.
>
>
> Jim Oberholtzer
> Agile Technology Architects
>
> > On Jul 16, 2026, at 2:54 PM, Pete Helgren <[email protected]> wrote:
> >
> > Might be that they don't have a clear understanding of a CA ROOT and
> intermediates.  I would have guessed that removing all but the cert
> assignment  would work if the CA cert was in the certificate store as well.
> >
> > Interesting config...
> >
> > Pete Helgren
> > www.petesworkshop.com
> > CISSP - MSCM
> > GIAC Cloud Penetration Tester
> > AWS Certified Cloud Practitioner
> > Microsoft Certified: Azure Fundamentals
> >
> >> On 7/16/2026 12:46 PM, Brad Stone wrote:
> >> I think I figured it out.  For some reason they had 5 different CAs
> >> assigned to the SMTP client application in DCM.  I removed all but the 2
> >> really needed and things seem to be flowing again.
> >>
> >> That's so weird.  I never assign CAs to a client application... they
> also
> >> have a certificate assigned to it for some reason too.  *shrug*
> >>
> >>> On Thu, Jul 16, 2026 at 12:19 PM Brad Stone <[email protected]> wrote:
> >>>
> >>> I am helping a customer with an email issue.  They are using the
> SPOOLMAIL
> >>> and apparently the emails are sent with the IBM SMTP server.
> >>>
> >>> when I use WRKSMTPEMM I see the emails as non deliverable.  I see in
> the
> >>> log this error:
> >>>
> >>> Secure socket init failed:6000(Certificate is not signed by a trusted
> >>> certificate authority.)
> >>>
> >>> I used openssl to get the certificate of the server and imported the
> >>> chain.  I stopped and restarted SMTP server and tried to resend.  Got
> the
> >>> same error.
> >>>
> >>> I also tried using MAILTOOL and turned on settings to not ignore "not
> >>> trusted" errors and have no issue there at all.  It's not complaining
> at
> >>> all.  It's using GSK APIs.. not sure what IBM is using.
> >>>
> >>> any ideas?
> >>>
> >>> Bradley V. Stone
> >>> www.bvstools.com
> >>> Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any
> >>> Cloud Provider!
> >>>
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> > To post a message email: [email protected]
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: [email protected]
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/midrange-l.
> >
> > Please contact [email protected] for any subscription
> related questions.
> >
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact [email protected] for any subscription related
> questions.
>
>
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact [email protected] for any subscription related questions.