Well, that helped a bit. I don't know if this is because of the age of the release, but there are no gsk8* files on the server, but there are some gsk7* files.
[692] ls -l /opt/ibm/gsk7_64/bin
total 2912
drwxr-xr-x 2 root sys 96 Mar 28 2011 ./
drwxr-xr-x 6 root sys 8192 Mar 28 2011 ../
-rwxr-xr-x 1 root sys 1348040 Oct 5 2016 gsk7capicmd_64*
-rwxr-xr-x 1 root sys 9728 Oct 5 2016 gsk7cmd_64*
-rwxr-xr-x 1 root sys 9728 Oct 5 2016 gsk7ikm_64*
-rwxr-xr-x 1 root sys 97176 Oct 5 2016 gsk7ver_64*
[695] ls -l /opt/ibm/gsk7_64/lib64
total 37200
drwxr-xr-x 2 root sys 8192 Jan 12 2018 ./
drwxr-xr-x 6 root sys 8192 Mar 28 2011 ../
-rwxr-xr-x 1 root sys 1760792 Oct 5 2016 libgsk7acmeidup_64.sl*
-rwxr-xr-x 1 root sys 5700312 Oct 5 2016 libgsk7cms_64.sl*
-rwxr-xr-x 1 root sys 1426112 Oct 5 2016 libgsk7dbfl_64.sl*
-rwxr-xr-x 1 root sys 1196368 Oct 5 2016 libgsk7drld_64.sl*
-rwxr-xr-x 1 root sys 59184 Oct 5 2016 libgsk7iccs_64.sl*
-rwxr-xr-x 1 root sys 853488 Oct 5 2016 libgsk7kicc_64.sl*
-rwxr-xr-x 1 root sys 217704 Oct 5 2016 libgsk7kjni_64.sl*
-rwxr-xr-x 1 root sys 2088136 Oct 5 2016 libgsk7km_64.sl*
-rwxr-xr-x 1 root sys 90304 Oct 5 2016 libgsk7krnc_64.sl*
-rwxr-xr-x 1 root sys 90304 Oct 5 2016 libgsk7krrb_64.sl*
-rwxr-xr-x 1 root sys 90304 Oct 5 2016 libgsk7krsw_64.sl*
-rwxr-xr-x 1 root sys 90304 Oct 5 2016 libgsk7msca_64.sl*
-rwxr-xr-x 1 root sys 1645512 Oct 5 2016 libgsk7p11_64.sl*
-rwxr-xr-x 1 root sys 2070968 Oct 5 2016 libgsk7ssl_64.sl*
-rwxr-xr-x 1 root sys 11888 Oct 5 2016 libgsk7sys_64.sl*
-rwxr-xr-x 1 root sys 1559312 Oct 5 2016 libgsk7valn_64.sl*
Like I said, this was an 11.50.FC6 instance, with CSDK 3.50.FC6, on HP-UX 11.31 PA-RISC. I know that IBM no longer support PA-RISC, so I may be out of luck.
------------------------------
mark collins
------------------------------
Original Message:
Sent: Wed July 26, 2023 12:21 PM
From: Paul Watson
Subject: using SSL with Informix
From a 14.10 server
[root@strider-int ~]# find / -mount -name gsk\* 2>/dev/null
/usr/bin/gsk8capicmd_64
/usr/bin/gsk8ver_64
/usr/local/ibm/gsk8_64
/usr/local/ibm/gsk8_64/bin/gsk8capicmd_64
/usr/local/ibm/gsk8_64/bin/gsk8ver_64
[root@strider-int ~]# find / -mount -name lib*gsk\* 2>/dev/null
/usr/lib64/libgsk8iccs_64.so
/usr/lib64/libgsk8sys_64.so
/usr/lib64/libgsk8p11_64.so
/usr/lib64/libgsk8km_64.so
/usr/lib64/libgsk8ssl_64.so
/usr/lib64/libgsk8drld_64.so
/usr/lib64/libgsk8kicc_64.so
/usr/lib64/libgsk8ldap_64.so
/usr/lib64/libgsk8cms_64.so
/usr/lib64/libgsk8acmeidup_64.so
/usr/lib64/libgsk8km2_64.so
/usr/lib64/libgsk8valn_64.so
/usr/lib64/libgsk8dbfl_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8iccs_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8acmeidup_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8cms_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8dbfl_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8drld_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8kicc_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8km2_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8km_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8ldap_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8p11_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8ssl_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8sys_64.so
/usr/local/ibm/gsk8_64/lib64/libgsk8valn_64.so
On 7/26/2023 11:17 AM, mark collins via IBM TechXchange Community wrote:
0100018992fda7be-c5dd5179-89dc-4c16-b2cb-7c5ab18e51c0-000000@email.amazonses.com"> Yes, I did the install as root. ------------------------------ mark collins ------------------------------ -posted to the "Informix" group
Original Message:
Sent: 7/26/2023 12:17:00 PM
From: mark collins
Subject: RE: using SSL with Informix
Yes, I did the install as root.
------------------------------
mark collins
Original Message:
Sent: Wed July 26, 2023 12:10 PM
From: Paul Watson
Subject: using SSL with Informix
Did you as root ?
The installgskit install doesn't do anything if it thinks the GSK is already there, at least that is my experience.
On 7/26/2023 10:51 AM, mark collins via IBM TechXchange Community wrote:
0100018992e5d014-40317d55-df31-466b-90e2-f0fe59121304-000000@email.amazonses.com"> 
Original Message:Sent: 7/26/2023 11:51:00 AMFrom: mark collinsSubject: RE: using SSL with InformixLooking at the docs (https://www.ibm.com/docs/en/informix-servers/14.10?topic=encryption-secure-sockets-layer-protocol#ids_ssl_001), I saw
- Until and including version 14.10.xC3, all Informix products use GSKit only. GSKit is packaged and installed with the Informix products themselves.
I took that to mean that GSKit would have been installed at the time that the 11.50.FC6 instance was installed. I did see $INFORMIXDIR/gskit/installgskit, and I ran that, but I still don't see any gsk8capi* files.
------------------------------mark collins
Original Message:Sent: Tue July 25, 2023 04:48 PMFrom: Paul WatsonSubject: using SSL with Informixdid you install the GSK ? and you need to use the 64 version of gsk8capicmd, which AFAIR is called gsk8capicmd64
On 7/25/2023 3:13 PM, mark collins via IBM TechXchange Community wrote:
010001898eaf6706-e916d16a-ee6f-464d-82b6-0e2ab9ca8915-000000@email.amazonses.com"> Been reading up on what it takes to set up encrypted communications with Informix. As I understand the docs, prior to 14.10.xC4W1, only GSKIT is...
| using SSL with Informix | | | | | | Been reading up on what it takes to set up encrypted communications with Informix. As I understand the docs, prior to 14.10.xC4W1, only GSKIT is supported for SSL. We're running 14.10.FC10 on Linux x86-64, so we should be able to use either GSKIT or OpenSSL. However, we have client applications running on HP-UX 11.31 on PA-RISC. The last version of Informix that was supported on PA-RISC is 11.70, and the CSDK that currently resides on that host is 3.50.FC6. The manual says that if we're using GSKIT, we would need to use the gsk8capicmd utility to build a password stash file. I cannot find gsk8capicmd anywhere on the HP client. Does anyone know what was the first release of CSDK to implement secure connections? We have other clients on Linux, with 4.50.something for the CSDK, and I find onkstash (but not gsk8capicmd) under $INFORMIXDIR/bin. So it seems that we should be able to use OpenSSL for the keystash on those hosts. Since there are no recent CSDK releases available for HP-UX on PA-RISC, can we implement secure communications via SSL for that? Or will we have to have a non-encrypted connection for HP-UX clients and then secured connections for Linux and Windows clients? ------------------------------ mark collins ------------------------------ | | | Reply to Group Online View Thread Recommend Forward Flag as Inappropriate | | |
-- Paul Watson Oninit www.oninit.com Tel: +1 913 364 0360 Cell: +1 913 387 7529 Oninit® is a registered trademark of Oninit LLC If you want to improve, be content to be thought foolish and stupid Failure is not as frightening as regret
Original Message:
Sent: 7/25/2023 4:13:00 PM
From: mark collins
Subject: using SSL with Informix
Been reading up on what it takes to set up encrypted communications with Informix. As I understand the docs, prior to 14.10.xC4W1, only GSKIT is supported for SSL. We're running 14.10.FC10 on Linux x86-64, so we should be able to use either GSKIT or OpenSSL. However, we have client applications running on HP-UX 11.31 on PA-RISC. The last version of Informix that was supported on PA-RISC is 11.70, and the CSDK that currently resides on that host is 3.50.FC6.
The manual says that if we're using GSKIT, we would need to use the gsk8capicmd utility to build a password stash file. I cannot find gsk8capicmd anywhere on the HP client. Does anyone know what was the first release of CSDK to implement secure connections?
We have other clients on Linux, with 4.50.something for the CSDK, and I find onkstash (but not gsk8capicmd) under $INFORMIXDIR/bin. So it seems that we should be able to use OpenSSL for the keystash on those hosts.
Since there are no recent CSDK releases available for HP-UX on PA-RISC, can we implement secure communications via SSL for that? Or will we have to have a non-encrypted connection for HP-UX clients and then secured connections for Linux and Windows clients?
------------------------------
mark collins
------------------------------