Re: OpenSSL for z/OS

2015-06-21 Thread Charles Mills
Do we know that the OP's only interest is in updating (unnecessarily, it would appear) the IBM Tools that use OpenSSL internally? Kirk and Walt seem to assume so. I OTOH (and perhaps David?) made the assumption -- perhaps incorrectly -- that he had an interest in using the OpenSSL library as

Re: OpenSSL for z/OS

2015-06-21 Thread Walt Farrell
On Sat, 20 Jun 2015 22:58:52 -0500, Anthony Fletcher flet...@nz1.ibm.com wrote: Does anyone know where an up to date verson of OpenSSL that will run on z/OS can be found. The version shipped in IBM Ported Tools is not current. I understand that at least version 1.0.1n is needed to address the

Re: OpenSSL for z/OS

2015-06-21 Thread Charles Mills
Slightly OT to your question but if you have any flexibility in the matter I would *highly* recommend using the IBM-supported GSK library rather than OpenSSL. The two are by no means plug-compatible with each other but do provide roughly comparable functionality. OpenSSL is awesome

Re: OpenSSL for z/OS

2015-06-21 Thread Kirk Wolf
Walt, You are correct. IBM Ported Tools OpenSSH includes *some* of the crypto algorithms (ciphers, MACs, and RSA, DSA, and EC-DSA key operations) from OpenSSL. But OpenSSH doesn't use SSL (at all), so the issues that we have seen with OpenSSL do not apply. Also, IBM Ported Tools OpenSSH uses

Re: How is CAMASTER started?

2015-06-21 Thread Walt Farrell
On Sun, 21 Jun 2015 11:05:34 +0200, nitz-...@gmx.net nitz-...@gmx.net wrote: Why does CAMASTER make itself a TRUSTED address space, not using any assigned userid in STARTED? On systems that run an unmodified SAF (as supplied by IBM), all address spaces that start during NIP are initially

Re: How is CAMASTER started?

2015-06-21 Thread Shane Ginnane
On Sun, 21 Jun 2015 11:05:34 +0200, Barbara wrote: Scott, ... am I correct in assuming Barbara, do you still get to the European z conferences?. Scott was at Boston. I'm sure he'd be in Europe as well. Take him out to get (at least) one of those excellent German beers, and find out in person.

Re: How is CAMASTER started?

2015-06-21 Thread Peter Relson
According to the ibmmain post ICHALTSP is an (IBM) IRIM that receives control in master scheduler (but you're right, I cannot find it in my SMPE environment either). I'm not sure which ibmmain post is being referred to but: - ICHALTSP is not an IRIM. IRIM has a specific meaning to z/OS. -

SMFDUMP CBT S0C4 under z/OS 2.1

2015-06-21 Thread Rich Szabo
SMFDUMP V10 from the CBT tape is giving us a S0C4 under z/OS 2.1. It’s choking on the instruction at x’E4’ which is GETNSMF TM RDSFLG1,RDSDUMP IS SMF DATASET FULL Error is a page translation exception, R10 = 130E1 Is anyone running SMFDUMP OK under 2.1? Does anyone have an updated version of

Re: SMFDUMP CBT S0C4 under z/OS 2.1

2015-06-21 Thread Lizette Koehler
Did you try to re-assemble and Lked the program with the V2.1 libraries? Lizette -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Rich Szabo Sent: Sunday, June 21, 2015 9:32 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SMFDUMP CBT

Re: OpenSSL for z/OS

2015-06-21 Thread Charles Mills
Walt, your first premise would appear to be sort-of correct. http://www-03.ibm.com/systems/z/os/zos/features/unix/bpxa1ty1.html says the free unsupported version of OpenSSL previously offered here is no longer available. Instead, we refer you to the functionally equivalent version available

Re: OpenSSL for z/OS

2015-06-21 Thread Walt Farrell
On Sun, 21 Jun 2015 10:53:39 -0700, Charles Mills charl...@mcn.org wrote: Do we know that the OP's only interest is in updating (unnecessarily, it would appear) the IBM Tools that use OpenSSL internally? Kirk and Walt seem to assume so. I OTOH (and perhaps David?) made the assumption --

Re: How is CAMASTER started?

2015-06-21 Thread nitz-...@gmx.net
Scott, We made our case to IBM, they agreed and provided a licensed API. am I correct in assuming that the API provides IBM with a way to start an address space (via one of the IBM IRIMs used for initializing the system) by using a CA module in the ASCRE? So essentially the first CA module