John,

In Z/OS 1.7 the Implicit SSL/TLS is no longer supported for FTP.  You need to 
use Explicit (Auth SSL).  The support for Explicit has changed, so you should 
upgrade to BlueZone Secure FTP 4.2.

Z/OS 1.7 and BlueZone 4.2 support RFC-4217. http://rfc.net/rfc4217.html


We have separated BlueZone Secure FTP from the BlueZone package and give it 
away free for personal, commercial, or government use.  This replaces BlueZone 
FTP (non-secure) and Seagull Free FTP. It installs in a different folder, so 
you can test it without breaking for upgrading your current BlueZone Desktop or 
Web-to-Host install.  BlueZone Secure FTP still ships with BlueZone and 
installs/upgrades the same way.

BlueZone Secure FTP support SSL/TLS, SSH, IPV6 and uses FIPS 140-2 encryption 
for SSL/TLS. You can download it at 
http://www.bluezonesoftware.com/products/secure-ftp .  No login or email 
address is required. You can choose to register it or not.

Steve Bireley
Vice-President
Product Development
BlueZone Software
1-404-364-1731
www.bluezonesoftware.com
www.rocketsoftware.com



>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Date:    Wed, 17 Oct 2007 09:03:17 -0500
From:    "Chase, John" <[EMAIL PROTECTED]>
Subject: More SSL/TLS and FTP woes

Hi, All,

I couldn't find anything relevant to the "problem du jour" in the
archives or the CS for z/OS 1.7 TCPIP Implementation Volume 2 Redbook,
so......

I'm able to employ SSL/TLS for FTP using the Bluezone FTP client, but
only if I configure it to use port 21 and "AUTH_TLS".  I cannot get it
working via "implicit" secure FTP using port 990; the z/OS 1.7 FTPD
replies "connection refused".  AFAICT, I have "all the ducks lined up in
a row", with one possible exception:  I don't explicitly "reserve" port
990 (and 989?) in the PORT configuration statement of PROFILE.TCPIP.
The IP Configuration Reference manual "suggests" it's not necessary to
do so.

Might this be the "missing link" after all?  Do I need to (additionally)
explicitly specify the statements in FTP.DATA that the manual says are
defaults for TLS_PORT, etc.?

TIA,

    -jc-

Steve Bireley
Vice-President
Product Development
BlueZone Software
1-404-364-1731
www.bluezonesoftware.com
www.seagullsoftware.com
www.rocketsoftware.com

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to