Dave Gibney wrote: >Over on CICS-L, I was told that TLS 2.3 requires z/OS 2.4. >Is this true? Any prospect of a implemnting PTF?
To my knowledge TLS 1.3 support was not backported to z/OS 2.3 System SSL, and I'm not aware of any plans to do so. Of course you can ask: https://www.ibm.com/developerworks/rfe/ Hypothetically you could run another software implementation of TLS 1.3 directly on z/OS 2.3 as a possible stopgap measure until you can upgrade to z/OS 2.4. For example, I think it might be possible to compile and run the Squid proxy server on z/OS if you're looking specifically for HTTPS with TLS 1.3. There are scattered reports, including one from IBM many years ago, that it's possible. Squid supports TLS 1.3 according to the documentation I found. The performance might not be wonderful, but it looks technically viable. Squid's source code and documentation are available here: http://www.squid-cache.org - - - - - - - - - - Timothy Sipples I.T. Architect Executive Digital Asset & Other Industry Solutions IBM Z & LinuxONE - - - - - - - - - - E-Mail: [email protected] ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
