On Mon, 26 Jun 2017 11:20:29 -0500, Kirk Wolf wrote:

>Since you kindly mentioned "fromdsn", I'll plug that a nice option would be
>to use Co:Z Hybrid batch to offload the encryption as part of transfer
>(without any unencrypted data at rest).
>
>Here's a slight variation of the example from our cookbook:
>https://dovetail.com/docs/coz/cookbook.html#4_3
>
>//STEP1   EXEC PROC=COZPROC,
>//        ARGS='[email protected]'
>//STDIN   DD *
>
>fromdsn -l rdw -k //DD:INPUT   \
>  | gpg -r key-1 --batch --output=- --encrypt=- \
>  | todsn -b //DD:OUTPUT
>/*
>//INPUT DD DISP=SHR,DSN=KIRK.CLEARTEXT.DATA
>//OUTPUT DD DSN=KIRK.ENCRYPT,DISP=(NEW,PASS),
>//          SPACE=(CYL,(1,1),RLSE),
>//          DCB=(RECFM=U,BLKSIZE=4096)
>
Does this do anytning that couldn't as well be done with:
    cp "//'KIRK.CLEARTEXT.DATA'" /dev/fd/1 |
    iconv -f IBM-037 -t IBM-1252 |
    gpg -r key-1 --batch --output=- --encrypt=- >~KIRK/ENCRYPT  # (I'm 
guessing.)

Why go back to to a non-UNIX data set at all?  UNIX files are much
more tractable for sftp, NFS, etc.

Is gpg:
o Standard with z/OS/
o Supplied with Co:Z?
o In Ported Tools?
o Other?

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to