Hi Andrew, AT-TLS is only for the server side, so you also need something for the client side, e.g. stunnel (I am mentioning it, because I have worked with it) or others. Assuming you have a TCPIP client and a TCPIP Server and you want to SSL enable it, add AT-TLS to the server (which means that the connection between TCPIP Server and AT-TLS is unencrypted) and either add a piece of software/hardware on the client side to transfrom the SSL encrypted stream into TCPIP and pass it to your client or rewrite the client to be native SSL capable. There are languages (e.g. Java) where a TCPIP client can be turned into a SSL enabled client just with some parameters and there are languages, where it will be a complete rewrite. Hope that helps. Denis. -----Original Message----- From: Andrew Rowley <and...@blackhillsoftware.com> To: IBM-MAIN <IBM-MAIN@LISTSERV.UA.EDU> Sent: Thu, Jun 15, 2017 1:52 pm Subject: Re: changing batch job to use SSL
On 10/06/2017 08:41 PM, Timothy Sipples wrote: > Have you looked at AT-TLS yet? It's a feature within Communications Server > for z/OS. > I don't quite understand how AT-TLS works as a client. If it inserts itself at the TCP level, how does it perform functions like e.g. validating the certificate from the server? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
