NOTICE:
All information in and attached to the e-mail(s) below may be proprietary,
confidential, privileged and otherwise protected from improper or erroneous
disclosure. If you are not the sender's intended recipient, you are not
authorized to intercept, read, print, retain, copy, forward, or disseminate
this message. If you have erroneously received this communication, please
notify the sender immediately by phone (704-758-1000) or by e-mail and destroy
all copies of this message (electronic, paper, or otherwise). Thank you.
Try creating a GSK trace with the FTP and reviewing that. That helped
me resolve several problems with encrypted FTP to outside companies.
Most of my problems were finding the correct CA for the other site and
getting that added to my keyring.
// PARM=('ENVAR("GSK_TRACE=0XFFFF","GSK_TRACE_FILE=/tmp/gskxxx.trc")',
// '/-r TLS (TRACE EXIT')
In OMVS run
gsktrace /tmp/gskxxx.trc >/tmp/gskxxx.txt
pg /tmp/gskxxx.txt
Larry Gray
Large Systems Engineering
Lowe's Companies
336-658-7944
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Chase, John
Sent: Tuesday, January 15, 2008 4:12 PM
To: [email protected]
Subject: Re: Encrypted transfers to/from vendors
> -----Original Message-----
> From: IBM Mainframe Discussion List On Behalf Of Aaron Walker
>
> On Mon, 14 Jan 2008 10:25:27 -0600, Patrick O'Keefe
> <[EMAIL PROTECTED]> wrote:
>
> >
> >I know IBMs Boulder site (testcase ?) supports HTTPS transfers. Do
> >they also support FTPS or SFTP? And what about IBM's emea site
(which
> >some parts of IBM greatly prefer over Boulder)? Does it support any
> >kind of encrypted transfers?
> >Thanks in advance.
>
> If you are sending data to ECuRep, it supports HTTP, HTTPS, FTP, FTPS,
> SFTP, and email.
>
> http://www-05.ibm.com/de/support/ecurep/index.html
>
Nice!
But what is the "magic incantation" to get it to work with a z/OS 1.7
client? I've tried every combination of FTPDATA parms that appear to
apply, but get no further than this (and not even this far with certain
CIPHERSUITEs):
EZA1736I FTP -a tls -v (EXIT
...
EZA1450I IBM FTP CS V1R7
EZA1772I FTP: EXIT has been set.
EZA1456I Connect to ?
EZA1736I ftp.emea.ibm.com
...
220-FTPD1 IBM FTP CS V1R7 at MCEFTP.MAINZ.IBM.COM, 21:55:51 on
2008-01-15.
...
FC0180 ftpAuth: security values: mech=TLS, sFTP=A, sCC=C, sDC=P
FC0213 ftpAuth: ........ cipherspecs = 352F0A090406
FC0254 ftpAuth: environment_open()
FC0372 ftpAuth: environment_init()
FC0381 ftpAuth: environment initialization complete
...
EZA1701I >>> AUTH TLS
...
234 Security environment established - ready for negotiation
FC0752 authServer: secure_socket_open()
FC0819 authServer: secure_socket_init()
FU0516 secureWrite: send() for: 60
FU0518 secureWrite: (cs) sent: 60
FU0437 secureRead: recv() for: 5
FU0439 secureRead: (cs) got: 5
FC0832 authServer: secure_socket_init failed with rc = 406 (Error while
reading or writing data)
FC0988 endSecureConn: entered
EZA2897I Authentication negotiation failed ...
With certain CIPHERSUITE statements, the session "hangs" after the
FU0437 message immediately above.
What am I missing?
TIA,
-jc-
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
