Last week I talked with some people at IBM about this,
and no one of them mentioned additional costs; AFAIK, this is part of
basic z/OS
if you have release 2.2 or higher and should come at no cost (with 2.1,
it can
be installed using PTF or APAR, IIRC).
This is NOT z/OS Connect EE, which may have additional costs. z/OS Connect
IMO supports both HTTP(S) client and server, whereas the z/OS Client web
enablement
toolkit only supports z/OS acting as a HTTP or HTTPS client.
By the way: the tool uses a Unix System Service address space, probably
to do
the encryption work (SSL). The calling function must be compiled and
linked using
POSIX(ON). IMO, this would be the same, if we would stay with our
current solution
(which does the HTTP work already) and add the SSL logic using z/OS SSL
encryption
services ... this again would force us to use an USS address spaces and
POSIX(ON).
Another option would have been to use the HTTP (and HTTPS) client
features of
CICS and call CICS from batch using EXCI.
But: in the meantime, some architects at the customer's site decided
that it would
be probably better to use a dedicated security proxy server which is
placed in the
secure zone besides the mainframe, so the communication from the mainframe
to the security proxy could remain HTTP (that is: my current solution),
and the
encryption and password enrichment etc. could be done by the security
proxy.
No change to the current mainframe solution needed at all. (The security
proxy
etc. is technology that the customer already has).
Kind regards
Bernd
Am 19.03.2019 um 19:50 schrieb scott Ford:
Bernd,
Is my assumption correct a customer must pay for this feature ? We run
z/PDT and I was just wondering if we could use it.
Regards,
Scott
IDMWORKS
z/OS Dev lead
On Tue, Mar 12, 2019 at 7:40 PM Bernd Oppolzer <bernd.oppol...@t-online.de>
wrote:
Thank you all for your valuable answers.
I found this presentation in the meantime:
http://www.newera.com/INFO/11-2017_Web_Enablement_Toolkit.pdf
and this:
http://ibmsystemsmag.com/mainframe/administrator/systemsmanagement/client-web-enablement-toolkit/?page=1
and these pages from IBM:
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.ieac100/ieac1-client-web-enablement.htm
all covering the same piece of software;
this will be my way to go, IMO.
Thanks again,
kind regards
Bernd
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
