From a 14.10 server
[root@strider-int ~]# find / -mount -name gsk\* 2>/dev/null
/usr/bin/gsk8capicmd_64
/usr/bin/gsk8ver_64
/usr/local/ibm/gsk8_64
/usr/local/ibm/gsk8_64/bin/gsk8capicmd_64
/usr/local/ibm/gsk8_64/bin/gsk8ver_64
[root@strider-int ~]# find / -mount -name lib*gsk\* 2>/dev/null
/usr/lib64/libgsk8iccs_64.so
/usr/lib64/libgsk8sys_64.so
/usr/lib64/libgsk8p11_64.so
/usr/lib64/libgsk8km_64.so
/usr/lib64/libgsk8ssl_64.so
/usr/lib64/libgsk8drld_64.so
/usr/lib64/libgsk8kicc_64.so
/usr/lib64/libgsk8ldap_64.so
/usr/lib64/libgsk8cms_64.so
/usr/lib64/libgsk8acmeidup_64.so
/usr/lib64/libgsk8km2_64.so
/usr/lib64/libgsk8valn_64.so
/usr/lib64/libgsk8dbfl_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8iccs_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8acmeidup_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8cms_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8dbfl_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8drld_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8kicc_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8km2_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8km_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8ldap_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8p11_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8ssl_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8sys_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8valn_64.so
On 7/26/2023 11:17 AM, mark collins via IBM TechXchange Community wrote:
0100018992fda7be-c5dd5179-89dc-4c16-b2cb-7c5ab18e51c0-000000@email.amazonses.com"> Yes, I did the install as root. ------------------------------ mark collins ------------------------------ -posted to the "Informix" group
Original Message:
Sent: 7/26/2023 12:17:00 PM
From: mark collins
Subject: RE: using SSL with Informix
Yes, I did the install as root.
------------------------------
mark collins
------------------------------
Original Message:
Sent: Wed July 26, 2023 12:10 PM
From: Paul Watson
Subject: using SSL with Informix
Did you as root ?
The installgskit install doesn't do anything if it thinks the GSK is already there, at least that is my experience. On 7/26/2023 10:51 AM, mark collins via IBM TechXchange Community wrote:
0100018992e5d014-40317d55-df31-466b-90e2-f0fe59121304-000000@email.amazonses.com">
Original Message:
Sent: 7/26/2023 11:51:00 AM
From: mark collins
Subject: RE: using SSL with Informix
Looking at the docs (https://www.ibm.com/docs/en/informix-servers/14.10?topic=encryption-secure-sockets-layer-protocol#ids_ssl_001), I saw
- Until and including version 14.10.xC3, all Informix products use GSKit only. GSKit is packaged and installed with the Informix products themselves.
I took that to mean that GSKit would have been installed at the time that the 11.50.FC6 instance was installed. I did see $INFORMIXDIR/gskit/installgskit, and I ran that, but I still don't see any gsk8capi* files.
------------------------------
mark collins
Original Message:
Sent: Tue July 25, 2023 04:48 PM
From: Paul Watson
Subject: using SSL with Informix
did you install the GSK ? and you need to use the 64 version of gsk8capicmd, which AFAIR is called gsk8capicmd64
On 7/25/2023 3:13 PM, mark collins via IBM TechXchange Community wrote:
010001898eaf6706-e916d16a-ee6f-464d-82b6-0e2ab9ca8915-000000@email.amazonses.com"> Been reading up on what it takes to set up encrypted communications with Informix. As I understand the docs, prior to 14.10.xC4W1, only GSKIT is...
using SSL with Informix | | | Been reading up on what it takes to set up encrypted communications with Informix. As I understand the docs, prior to 14.10.xC4W1, only GSKIT is supported for SSL. We're running 14.10.FC10 on Linux x86-64, so we should be able to use either GSKIT or OpenSSL. However, we have client applications running on HP-UX 11.31 on PA-RISC. The last version of Informix that was supported on PA-RISC is 11.70, and the CSDK that currently resides on that host is 3.50.FC6. The manual says that if we're using GSKIT, we would need to use the gsk8capicmd utility to build a password stash file. I cannot find gsk8capicmd anywhere on the HP client. Does anyone know what was the first release of CSDK to implement secure connections? We have other clients on Linux, with 4.50.something for the CSDK, and I find onkstash (but not gsk8capicmd) under $INFORMIXDIR/bin. So it seems that we should be able to use OpenSSL for the keystash on those hosts. Since there are no recent CSDK releases available for HP-UX on PA-RISC, can we implement secure communications via SSL for that? Or will we have to have a non-encrypted connection for HP-UX clients and then secured connections for Linux and Windows clients? ------------------------------ mark collins ------------------------------ | | Reply to Group Online View Thread Recommend Forward Flag as Inappropriate | | |
-- Paul Watson Oninit www.oninit.com Tel: +1 913 364 0360 Cell: +1 913 387 7529 Oninit® is a registered trademark of Oninit LLC If you want to improve, be content to be thought foolish and stupid Failure is not as frightening as regret
Original Message:
Sent: 7/25/2023 4:13:00 PM
From: mark collins
Subject: using SSL with Informix
Been reading up on what it takes to set up encrypted communications with Informix. As I understand the docs, prior to 14.10.xC4W1, only GSKIT is supported for SSL. We're running 14.10.FC10 on Linux x86-64, so we should be able to use either GSKIT or OpenSSL. However, we have client applications running on HP-UX 11.31 on PA-RISC. The last version of Informix that was supported on PA-RISC is 11.70, and the CSDK that currently resides on that host is 3.50.FC6.
The manual says that if we're using GSKIT, we would need to use the gsk8capicmd utility to build a password stash file. I cannot find gsk8capicmd anywhere on the HP client. Does anyone know what was the first release of CSDK to implement secure connections?
We have other clients on Linux, with 4.50.something for the CSDK, and I find onkstash (but not gsk8capicmd) under $INFORMIXDIR/bin. So it seems that we should be able to use OpenSSL for the keystash on those hosts.
Since there are no recent CSDK releases available for HP-UX on PA-RISC, can we implement secure communications via SSL for that? Or will we have to have a non-encrypted connection for HP-UX clients and then secured connections for Linux and Windows clients?
------------------------------
mark collins
------------------------------