Does gsk_export_certificate do what you need ?. It is documented in z/os 
Cryptographic Services System SSL Programming. There are several functions for 
handling certificates.

Sent from my iPad

> On 14 Apr 2023, at 20:07, Isabel <[email protected]> wrote:
> Hello, thanks for your answers, but I think I was not clear about what we
> want.
> 
> We need to build a CICS Transaction to create a PKCS #7 (pkcs7-signedData)
> containing a signature. We were thinking of using ICSF's PKCS #11 callable
> services, but we don't have the TKDS keystore.
> 
> Thanks in advance!
> 
> 
> 
> On Fri, Apr 14, 2023 at 2:20 AM Matthew Donald <[email protected]>
> wrote:
> 
>>> We need to build a CICS Transaction to obtain a PKCS #7 (token) to
>>> authenticate a user.
>>> I am confused if I have to use a RACF certificate, ICSF or both.
>> 
>> 
>> If you mean 2FA for CICS: see
>> 
>> https://www.ibm.com/docs/en/cics-ts/5.6?topic=securing-support-multi-factor-authentication-using-racf
>> 
>> Matthew
>> 
>> On Wed, 5 Apr 2023 at 00:16, Isabel <[email protected]> wrote:
>> 
>>> Hello!
>>> I have the following request:
>>> We need to build a CICS Transaction to obtain a PKCS #7 (token) to
>>> authenticate a user.
>>> I am confused if I have to use a RACF certificate, ICSF or both.
>>> Thanks in advance.
>>> ----------------------------------------------------------------------
>>> For IBM-MAIN subscribe / signoff / archive access instructions,
>>> send email to [email protected] with the message: INFO IBM-MAIN
>> 
>> ----------------------------------------------------------------------
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to [email protected] with the message: INFO IBM-MAIN
> 
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to