Dave, Here you go: ################################################################## # # # Secure FTP Application # # # ################################################################### TTLSRule secure_ftp_client_rule { RemotePortRange 21 # This should be set to the port the FTP # listening on Direction Outbound TTLSGroupActionRef secure_ftp_client_group TTLSEnvironmentActionRef secure_ftp_client_env } TTLSGroupAction secure_ftp_client_group { TTLSEnabled On Trace 7 } TTLSEnvironmentAction secure_ftp_client_env { TTLSKeyringParms { Keyring /u/ftps/zos17dbf.kdb KeyringStashFile /u/ftps/zos17dbf.sth } HandshakeRole Client TTLSEnvironmentAdvancedParms { ApplicationControlled On SecondaryMap On SSLV3 Off TLSV1 Off TLSV1.1 Off TLSV1.2 On } TTLSCipherParmsRef ftp_client_ciphers # to cust ciphers } TTLSCipherParms ftp_client_ciphers { # Sample ciphers. Should be customized! V3CipherSuites TLS_RSA_WITH_AES_256_CBC_SHA V3CipherSuites TLS_RSA_WITH_3DES_EDE_CBC_SHA V3CipherSuites TLS_RSA_WITH_NULL_SHA }
-----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Dave Jousma Sent: Wednesday, May 05, 2021 1:13 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMPE Receive Order post May 1st [[ SEI WARNING *** This email was sent from an external source. Do not open attachments or click on links from unknown or suspicious senders. *** ]] > Well, for what it's worth, I just tried it and my job was successful, >however, I also received the SSLv23/TLSv1 messages. So I used the >standard job that IBM provided (RFNJOBS) and I turned on Debug SEC. >Here is what I got (snip) Hey Tony, Thanks for this. For some reason we are still struggling. Would you be willing to share what your pagent policy for these items: FU2420 TTLSRule: secure_ftp_client_rule FU2426 TTLSGroupAction: secure_ftp_client_group FU2432 TTLSEnvironmentAction: secure_ftp_client_env looks like? I dont think there is anything sensitive, and if you'd rather, you can send to me off-list (david.jou...@53.com) ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN