Re: Extract certificate data from z/OS

2019-03-12 Thread Jerry Whitteridge
Look at the Java keytool command - it can manipulate most Certs that can be
discovered/

Jerry Whitteridge
Delivery Manager / Mainframe Architect
GTS - Safeway Account
602 527 4871 Mobile
jerry.whitteri...@ibm.com

IBM Services

IBM Mainframe Discussion List  wrote on
03/12/2019 09:51:22 AM:

> From: Kurt Quackenbush 
> To: IBM-MAIN@LISTSERV.UA.EDU
> Date: 03/12/2019 09:52 AM
> Subject: Re: Extract certificate data from z/OS
> Sent by: IBM Mainframe Discussion List 
>
> On 3/12/2019 7:33 AM, Peter wrote:
> >
> > Is it possible to extract certificate data from z/OS without going
through
> > RACF ?
>
> Are you asking how to extract x.509 certificates from a RACF (or other
> security manager) data base without using RACF commands?  You can use
> Java.  Do a google search on "JCERACFKS" and (I think) the
> java.security.cert class.
>
> Kurt Quackenbush -- IBM, SMP/E Development
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Extract certificate data from z/OS

2019-03-12 Thread Kurt Quackenbush

On 3/12/2019 7:33 AM, Peter wrote:


Is it possible to extract certificate data from z/OS without going through
RACF ?


Are you asking how to extract x.509 certificates from a RACF (or other 
security manager) data base without using RACF commands?  You can use 
Java.  Do a google search on "JCERACFKS" and (I think) the 
java.security.cert class.


Kurt Quackenbush -- IBM, SMP/E Development

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Extract certificate data from z/OS

2019-03-12 Thread Brian France
We're an ACF2 shop and have not placed our certs there. They are only in 
an omvs file that we use gskkyman to manage them.


On 3/12/2019 10:32 AM, Peter wrote:

Hi

Apology if it is a silly or it doesn't makes any sense.

Is it possible to extract certificate data from z/OS without going through
RACF ?

This is just a small POC our developers they wanted to know

Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Extract certificate data from z/OS

2019-03-12 Thread Peter
Hi

Apology if it is a silly or it doesn't makes any sense.

Is it possible to extract certificate data from z/OS without going through
RACF ?

This is just a small POC our developers they wanted to know

Peter

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN