IBM Z and LinuxONE IBM Z

  • 1.  Looking for V2R4 PAGENT samples

    Posted Thu May 19, 2022 06:17 PM

    I am trying to implement TLSv1.3. I have PAGENT working with v1.2. The samples for the PAGENT configuration file in the samples library on our Dallas system is for z/OS V2R3 (which did not support TLS v1.3 if I recall correctly).

     

    IEE254I  17.14.58 IPLINFO DISPLAY 141                    

     SYSTEM IPLED AT 12.24.29 ON 05/17/2022                  

     RELEASE z/OS 02.04.00    LICENSE = z/OS                 

     USED LOADW1 IN SYS1.IPLPARM ON 00CE3                    

     ARCHLVL = 2   MTLSHARE = N                              

     IEASYM LIST = (W1,SV,VN)                                

     IEASYS LIST = (00,LV,SV,VN) (OP)                        

     IODF DEVICE: ORIGINAL(00CE3) CURRENT(00CE3)             

     IPL DEVICE: ORIGINAL(01000) CURRENT(01000) VOLUME(VIMVSB)

     

    But note Status = below:

     

    ###################################################################

    #  IBM Communications Server for z/OS                             #

    #  SMP/E distribution path: /usr/lpp/tcpip/samples/IBM/EZAPAGFT   #

    #                                                                 #

    #                                                                 #

    #  5650-ZOS Copyright IBM Corp. 2005, 2017.                       #

    #  Licensed Materials - Property of IBM                           #

    #                                                                 #

    #  Status = CSV2R3                                                #

    #                                                                 #

    #  /usr/lpp/tcpip/samples/pagent_TTLS.conf                        #

    #                                                                 #

    ###################################################################

     

    Charles A. Mills | Chief Development Officer

    Phone: 707-291-0908
    Toll Free: 877-245-4322
    Email: Charles.Mills@CloudCompiling.com
    www.CloudCompiling.com

     

     



  • 2.  RE: Looking for V2R4 PAGENT samples

    Posted Fri May 20, 2022 06:46 AM
    Hi Charles,

    You are correct that TLSv1.3 support was added in V2R4 - you won't find anything related to TLSv1.3 in the V2R3 samples.   Not sure why the copyright for the sample you included was dated 2017, but I suspect there was some changes to that file in the service stream in 2017 -- nothing to do with TLSv1.3.

    For a good example of policy configuration that includes TLSv1.3, please refer to the example starting on page 18 of the recently-updated Db2 / AT-TLS redpaper ( IBM DB2 for z/OS: Configuring TLS/SSL for Secure Client/Server Communications )
    Ibm remove preview
    IBM DB2 for z/OS: Configuring TLS/SSL for Secure Client/Server Communications
    This IBM® Redpaper publication provides information about how to set up and configure IBM Db2® for z/OS® with Transport Layer Security (TLS), which is the modern version of Secure Sockets Layer (SSL). This configuration is accomplished by using the IBM
    View this on Ibm >


    ------------------------------
    Regards,

    Chris Meyer
    ------------------------------

    Original Message


  • 3.  RE: Looking for V2R4 PAGENT samples

    Posted Fri May 20, 2022 09:34 AM

    Chris, thank you, yes, looks extremely helpful.

     

    Interesting coincidence – the author of that RedPaper is also named Chris Meyer. <g>

     

    Charles A. Mills | Chief Development Officer

    Phone: 707-291-0908
    Toll Free: 877-245-4322
    Email: Charles.Mills@CloudCompiling.com
    www.CloudCompiling.com

     

     




    Original Message


  • 4.  RE: Looking for V2R4 PAGENT samples

    Posted Fri May 20, 2022 03:04 PM

    This RedPaper is AWESOME. Got TLSv1.3 working on my FIRST try after following the guidance in the RedPaper.

     

    Thank you @Chris Meyer.

     

    HIGHLY recommended to anyone trying to get AT-TLS to work, either at the v1.3 level, or an earlier level.

     

    Charles A. Mills | Chief Development Officer

    Phone: 707-291-0908
    Toll Free: 877-245-4322
    Email: Charles.Mills@CloudCompiling.com
    www.CloudCompiling.com

     

     




    Original Message


  • 5.  RE: Looking for V2R4 PAGENT samples

    Posted Sat May 21, 2022 04:48 PM
    Thanks Charles - I'm glad the paper was helpful!   Derek Tempongko and I were excited to have the opportunity to bring it up to date.

    ------------------------------
    Regards,

    Chris Meyer
    ------------------------------

    Original Message


  • 6.  RE: Looking for V2R4 PAGENT samples

    Posted Mon May 23, 2022 07:08 AM
    Thank you Charles, for your feedback on this RedPaper.  It's hard to know where these gems are hidden.  It would have been a great help when I struggled with AT/TLS on 2.4 in another context.  I'm sure it will be useful for 2.5 also.
    And thanks to the authors!

    ------------------------------
    Richard Craven
    ------------------------------

    Original Message