Re: Extract certificate data from z/OS
Look at the Java keytool command - it can manipulate most Certs that can be discovered/ Jerry Whitteridge Delivery Manager / Mainframe Architect GTS - Safeway Account 602 527 4871 Mobile jerry.whitteri...@ibm.com IBM Services IBM Mainframe Discussion List wrote on 03/12/2019 09:51:22 AM: > From: Kurt Quackenbush > To: IBM-MAIN@LISTSERV.UA.EDU > Date: 03/12/2019 09:52 AM > Subject: Re: Extract certificate data from z/OS > Sent by: IBM Mainframe Discussion List > > On 3/12/2019 7:33 AM, Peter wrote: > > > > Is it possible to extract certificate data from z/OS without going through > > RACF ? > > Are you asking how to extract x.509 certificates from a RACF (or other > security manager) data base without using RACF commands? You can use > Java. Do a google search on "JCERACFKS" and (I think) the > java.security.cert class. > > Kurt Quackenbush -- IBM, SMP/E Development > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Extract certificate data from z/OS
On 3/12/2019 7:33 AM, Peter wrote: Is it possible to extract certificate data from z/OS without going through RACF ? Are you asking how to extract x.509 certificates from a RACF (or other security manager) data base without using RACF commands? You can use Java. Do a google search on "JCERACFKS" and (I think) the java.security.cert class. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Extract certificate data from z/OS
We're an ACF2 shop and have not placed our certs there. They are only in an omvs file that we use gskkyman to manage them. On 3/12/2019 10:32 AM, Peter wrote: Hi Apology if it is a silly or it doesn't makes any sense. Is it possible to extract certificate data from z/OS without going through RACF ? This is just a small POC our developers they wanted to know Peter -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Brian W. France Systems Administrator (Mainframe) Pennsylvania State University Administrative Information Services - Infrastructure/SYSARC Rm 25 Shields Bldg., University Park, Pa. 16802 814-863-4739 b...@psu.edu "To make an apple pie from scratch, you must first invent the universe." Carl Sagan -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Extract certificate data from z/OS
Hi Apology if it is a silly or it doesn't makes any sense. Is it possible to extract certificate data from z/OS without going through RACF ? This is just a small POC our developers they wanted to know Peter -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN