PASSPORT Knowledge Base
Configuration

Date Published: February 16, 2005
Date Updated: March 3, 2008

Title

SSL Certificate Type

Product

PASSPORT PC to Host, PASSPORT Web to Host

Emulation Types

TN3270, TN5250

Issue

What type of SSL Certificates does PASSPORT Web to Host with SSL support?

Solution

PASSPORT supports the following SSL certificate types and options:

 

Accept Self-Signed Certificates

Enable to accept a self-signed server certificate.

 

Accept Expired Certificates

Enable to accept a server certificate that has expired.

 

Accept Not Yet Valid Certificates

Enable to accept a server certificate that has a starting date in the future.

 

Accept Invalid Certificates

Enable to accept if the server certificate is invalid for any reason other than the date or signature. With this option enabled, the server certificate check will be ignored.

 

Accept Host Name Mismatch

Enable to accept SSL certificates that have mismatched names. Host names may be either an IP address or a DNS name. In order for host names to match both must be either IP addresses or DNS names.

 

Action if Certificate Not Accepted

This option determines how PASSPORT will respond to any items above that are unchecked. The items above that are checked will ignore this option and allow the certificate. Choose one of the following:

Enable Client Authentication

If enabled, an SSL client certificate will be used to establish an SSL connection with the host. A certificate must be specified in order to use this option.

 

Certificate to use from "My" store:

Select the SSL certificate to use. In order to use your own SSL client certificate, it must first be added to the Microsoft Windows Certificate Store.

 

When SSL security is enabled, the text "SSL" appears in positions 5-7 of the OIA line and a padlock will display on the status bar. Double-clicking the padlock will display the certificate information on the server the session is currently connected to.

More Information

Keywords

ssl, secure, security, certificate, client authentication, expired, invalid, host name mismatch, self-signed