I am at z/OS 2.1 and have EXTENSIONS AUTH_TLS TLSRFCLEVEL RFC4217 And some level of TLS is working
> -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] > On Behalf Of Rob Schramm > Sent: Monday, April 10, 2017 6:18 PM > To: [email protected] > Subject: Re: FTP TLS options > > Yes. But policy agent is not actually that hard...But on zOS GT 1.13 you need > zOSMF as well. > > Rob Schramm > > On Mon, Apr 10, 2017, 7:05 PM Frank Swarbrick > <[email protected]> > wrote: > > > I'm guessing there's a bit more to it than that, yes? Such as > > actually configuring Policy Agent? > > > > ________________________________ > > From: IBM Mainframe Discussion List <[email protected]> on > > behalf of Tom Conley <[email protected]> > > Sent: Monday, April 10, 2017 3:46 PM > > To: [email protected] > > Subject: Re: FTP TLS options > > > > On 4/10/2017 3:15 PM, Frank Swarbrick wrote: > > > Hi Mike. > > > > > > I assume you mean: > > > TLSMECHANISM ATTLS > > > where the default (which we use) is > > > TLSMECHANISM FTP > > > > > > Unfortunately we don't currently have AT-TLS set up. When I try to > > > use > > it I get the following: > > > AT-TLS not enabled on TCPCONFIG > > > > > > Does z/OS FTP not support TLS v1.2 when TLSMECHANISM=FTP? > > > > > > > > > I am not a sysprog so I can't speak to the question about IBM's > > > security > > vulnerability warnings. > > > > > > Frank > > > > Thou needst TCPCONFIG TTLS in thy PROFILE member, varlet. > > > > Yours, > > Thomas de Conley > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to [email protected] with the message: INFO IBM-MAIN > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to [email protected] with the message: INFO IBM-MAIN > > > -- > > Rob Schramm > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
