Re: Help with switching an IP:PORT to TLS V1.2

2021-12-24 Thread Don Poitras
AT-TLS is mutually exclusive with applications that actually call SSL functions 
(OpenSSL, GSK, etc.). The "AT" part means "Application Transparent". i.e, the 
program just uses sockets and doesn't deal with encryption at all. There's no 
way to set TLS 1.2 until one answers the question as to what's actually being 
used.

On Fri, 24 Dec 2021 03:24:51 +, kekronbekron  
wrote:

>Plus, I remember there's some environment variables that must be set for 
>things like this.
>At least that's what I've seen in LDAPS, for example.
>GSK_SSL_something type variables to tune, turn off, or allow only specific 
>SSL/TLS versions, or ciphers.
>
>- KB
>
>‐‐‐ Original Message ‐‐‐
>
>On Thursday, December 23rd, 2021 at 10:52 PM, Matthew Stitt 
> wrote:
>
>> Are you sure the SSL options are turned off, leaving only the TLSV12 option 
>> on?
>>
>> Matthew
>>
>> On Thu, 23 Dec 2021 10:01:26 -0700, Lizette Koehler stars...@mindspring.com 
>> wrote:
>>
>> > We have done the Packet trace. It was not conclusive.
>> >
>> > Only showed that TLS V1.2 is being used. However - some were thinking that 
>> > was not true since the connection (according to them) was behaving like 
>> > SSLV3 what ever that means.
>> >
>> > Lizette
>> >
>> > -Original Message-
>> >
>> > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Behalf Of 
>> > Don Poitras
>> >
>> > Sent: Thursday, December 23, 2021 8:06 AM
>> >
>> > To: IBM-MAIN@LISTSERV.UA.EDU
>> >
>> > Subject: Re: Help with switching an IP:PORT to TLS V1.2
>> >
>> > You could also just do a packet trace. Send the output to Wireshark. It 
>> > can format all the TLS hand-shaking traffic. The question I'd have, given 
>> > the original description is whether AT-TLS is being used at all. Perhaps 
>> > the program is using OpenSSL or GSK?
>> >
>> > https://www.ibm.com/support/pages/how-capture-and-format-ssl-component-trace

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Unemployed

2021-12-24 Thread Bob Bridges
Actually, I was confused by Mr Johnson's reply; I couldn't see that it was
insulting, or perhaps that it was connected with my post at all.  I thought
maybe he accidentally intended it as a response to a different entry.

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* It is only the huge habits that people change without trouble.
Communists can become Fascists with a day's notice and Conservatives can
crawl into the Liberal bed (or vice versa) with scarely an extra breath
between; men can switch wives and mousy women can go liberationist - but
show me a fellow who squeezes his toothpaste tube with his left hand, and
I'll show you a fellow who will never do it with his right hand, except
maybe to win a bet and even then he'll have trouble.  -from _Murder at the
ABA_, by Isaac Asimov */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Seymour J Metz
Sent: Friday, December 24, 2021 11:42

Repeating insults in the same message in which you are telling others to end
it is hypocritical.


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Bill Johnson
Sent: Thursday, December 23, 2021 10:55 PM

Since only I seem to get the attacks from the dirty dozen or so, I'm going
to pass along Eric's recommendation.
I'll tell you the same thing Eric tells his children: I don't care who
started it. End it.

Act like a mature mainframer.

--- On Thursday, December 23, 2021, 5:42 PM, Bob Bridges
 wrote:
Boy, ~I~ sure have.  I'm pretty sure I've been fired from more employment
gigs than I've left voluntarily.  (I'm not counting contract gigs, which of
course always end eventually in the client sending you home.)

I don't think I have any records indicating what's the longest I've been
unemployed.  Nine months, maybe?

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of
Bill Johnson
Sent: Thursday, December 23, 2021 12:09

I've worked with hundreds of peopleAnd I've never been unemployed in my
40 yeats.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Last Warning - Off-topic posts

2021-12-24 Thread Darren Evans-Young
Please keep discussions on-topic please!

If you continue to post off-topic emails to the list, you
will be removed or at least NOPOSTed.  I'm receiving
complaints AGAIN!

If you are having an issue with another subscriber, you
can email them directly and not to the list.

Thanks,
Darren

P.S. - No need to reply/comment on this email either.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: In the spirit of unity

2021-12-24 Thread Bill Johnson
Same to you and everyone on the list.


Sent from Yahoo Mail for iPhone


On Friday, December 24, 2021, 1:20 PM, Matt Hogstrom  wrote:

For all of you, wishing you a great holiday with friends and family.  For me 
it’s Merry  Christmas

Matt Hogstrom
Broadcom Distinguished Engineer
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


In the spirit of unity

2021-12-24 Thread Matt Hogstrom
For all of you, wishing you a great holiday with friends and family.  For me 
it’s Merry  Christmas

Matt Hogstrom
Broadcom Distinguished Engineer
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: article about ransomeware and mainframe

2021-12-24 Thread zMan
Nonresponsive, move to strike.

On Fri, Dec 24, 2021 at 10:02 AM Bill Johnson <
0047540adefe-dmarc-requ...@listserv.ua.edu> wrote:

> Well, we certainly know AWS isn’t unbreakable. And I wonder if Capital One
> still thinks moving off the mainframe was a smart move? I doubt it. 190
> million in fines is probably more than what their mainframe cost. Many
> times over.
>
>
>
> Sent from Yahoo Mail for iPhone
>
>
> On Friday, December 24, 2021, 12:03 AM, David Crayford <
> dcrayf...@gmail.com> wrote:
>
> Here we go again. Bulls**t Bill is spouting his usual ignorant nonsense.
> One of my colleagues was working in the z/OS Unix team at the time of
> the Logica breach and was part of the team who performed a detailed,
> forensic investigation. The fact is that a hacker exploited a serious
> zero day vulnerability and had complete control of the system. I'm
> privileged to work with some of the best mainframe experts in the world
> and they all take secure engineering very seriously.  People like you
> who assume the mainframe is unbreakable are dangerous.
>
> On 21/12/21 9:47 pm, Bill Johnson wrote:
> > Rehash of Nordea (2012) and all the mainframe hacks since. (Zero) Yes,
> if you don’t take precautions, you too can join Nordea in the stupidity
> hall of fame.
> >
> >
> > Sent from Yahoo Mail for iPhone
> >
> >
> > On Tuesday, December 21, 2021, 8:43 AM, Barkow, Eileen <
> 02bc504b1642-dmarc-requ...@listserv.ua.edu> wrote:
> >
> > This is the real link to the article
> >
> >
> https://public.milcyber.org/activities/magazine/articles/2021/renda-ransomware-and-the-ibm-zos-mainframe-big-iron
> >
> >
> >
> > From: Barkow, Eileen
> > Sent: Tuesday, December 21, 2021 8:37 AM
> > To: IBM Mainframe Discussion List (IBM-MAIN@listserv.ua.edu) <
> IBM-MAIN@listserv.ua.edu>
> > Cc: Renda, Paul 
> > Subject: article about ransomeware and mainframe
> >
> >
> > This article was written by Paul Renda, who is one of our colleagues in
> the RACF security group.
> >
> >
> >
> >
> https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.realcleardefense.com%2F=04%7C01%7CEBarkow%40doitt.nyc.gov%7C83d7e2a8d8c94c3ef06a08d9c47eacc6%7C73d61799c28440228d4154cc4f1929ef%7C0%7C0%7C637756870611033992%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=cJPoABb4zN%2BjjdtzetU936rkBhnnnSgSlROmjbCDsfw%3D=0
> >
> >
> >
> > 
> >
> > This e-mail, including any attachments, may be confidential, privileged
> or otherwise legally protected. It is intended only for the addressee. If
> you received this e-mail in error or from someone who was not authorized to
> send it to you, do not disseminate, copy or otherwise use this e-mail or
> its attachments. Please notify the sender immediately by reply e-mail and
> delete the e-mail from your system.
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >
> >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>


-- 
zMan -- "I've got a mainframe and I'm not afraid to use it"

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Unemployed

2021-12-24 Thread Bill Johnson
Really? I’ve not been targeted with insults? That in itself is an insult.


Sent from Yahoo Mail for iPhone


On Friday, December 24, 2021, 12:46 PM, Seymour J Metz  wrote:

> Where’s the insult? 

Are you claiming that "dirty dozen" is polite discourse?

> Or are you referring to Eric’s statement to me is an insult?

I don't recall any insults directed at you in this thread.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Bill Johnson [0047540adefe-dmarc-requ...@listserv.ua.edu]
Sent: Friday, December 24, 2021 12:41 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Unemployed

Where’s the insult? Or are you referring to Eric’s statement to me is an insult?


Sent from Yahoo Mail for iPhone


On Friday, December 24, 2021, 11:42 AM, Seymour J Metz  wrote:

Repeating insults in the same message in which you are telling others to end it 
is hypocritical.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Bill Johnson [0047540adefe-dmarc-requ...@listserv.ua.edu]
Sent: Thursday, December 23, 2021 10:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Unemployed

Since only I seem to get the attacks from the dirty dozen or so, I’m going to 
pass along Eric’s recommendation.
I'll tell you the same thing Eric tells his children: I don't care who started
it. End it.

Act like a mature mainframer.


Sent from Yahoo Mail for iPhone


On Thursday, December 23, 2021, 5:42 PM, Bob Bridges  
wrote:

Boy, ~I~ sure have.  I'm pretty sure I've been fired from more employment gigs 
than I've left voluntarily.  (I'm not counting contract gigs, which of course 
always end eventually in the client sending you home.)

I don't think I have any records indicating what's the longest I've been 
unemployed.  Nine months, maybe?

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Even nowadays a man can't step up and kill a woman without feeling just a 
bit unchivalrous.  -Robert Benchley */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Bill Johnson
Sent: Thursday, December 23, 2021 12:09

I’ve worked with hundreds of peopleAnd I’ve never been unemployed in my 40 
yeats.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Unemployed

2021-12-24 Thread Seymour J Metz
> Where’s the insult? 

Are you claiming that "dirty dozen" is polite discourse?

> Or are you referring to Eric’s statement to me is an insult?

I don't recall any insults directed at you in this thread.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Bill Johnson [0047540adefe-dmarc-requ...@listserv.ua.edu]
Sent: Friday, December 24, 2021 12:41 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Unemployed

Where’s the insult? Or are you referring to Eric’s statement to me is an insult?


Sent from Yahoo Mail for iPhone


On Friday, December 24, 2021, 11:42 AM, Seymour J Metz  wrote:

Repeating insults in the same message in which you are telling others to end it 
is hypocritical.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Bill Johnson [0047540adefe-dmarc-requ...@listserv.ua.edu]
Sent: Thursday, December 23, 2021 10:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Unemployed

Since only I seem to get the attacks from the dirty dozen or so, I’m going to 
pass along Eric’s recommendation.
I'll tell you the same thing Eric tells his children: I don't care who started
it. End it.

Act like a mature mainframer.


Sent from Yahoo Mail for iPhone


On Thursday, December 23, 2021, 5:42 PM, Bob Bridges  
wrote:

Boy, ~I~ sure have.  I'm pretty sure I've been fired from more employment gigs 
than I've left voluntarily.  (I'm not counting contract gigs, which of course 
always end eventually in the client sending you home.)

I don't think I have any records indicating what's the longest I've been 
unemployed.  Nine months, maybe?

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Even nowadays a man can't step up and kill a woman without feeling just a 
bit unchivalrous.  -Robert Benchley */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Bill Johnson
Sent: Thursday, December 23, 2021 12:09

I’ve worked with hundreds of peopleAnd I’ve never been unemployed in my 40 
yeats.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Unemployed

2021-12-24 Thread Bill Johnson
Where’s the insult? Or are you referring to Eric’s statement to me is an insult?


Sent from Yahoo Mail for iPhone


On Friday, December 24, 2021, 11:42 AM, Seymour J Metz  wrote:

Repeating insults in the same message in which you are telling others to end it 
is hypocritical.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Bill Johnson [0047540adefe-dmarc-requ...@listserv.ua.edu]
Sent: Thursday, December 23, 2021 10:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Unemployed

Since only I seem to get the attacks from the dirty dozen or so, I’m going to 
pass along Eric’s recommendation.
I'll tell you the same thing Eric tells his children: I don't care who started
it. End it.

Act like a mature mainframer.


Sent from Yahoo Mail for iPhone


On Thursday, December 23, 2021, 5:42 PM, Bob Bridges  
wrote:

Boy, ~I~ sure have.  I'm pretty sure I've been fired from more employment gigs 
than I've left voluntarily.  (I'm not counting contract gigs, which of course 
always end eventually in the client sending you home.)

I don't think I have any records indicating what's the longest I've been 
unemployed.  Nine months, maybe?

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Even nowadays a man can't step up and kill a woman without feeling just a 
bit unchivalrous.  -Robert Benchley */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Bill Johnson
Sent: Thursday, December 23, 2021 12:09

I’ve worked with hundreds of peopleAnd I’ve never been unemployed in my 40 
yeats.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: What controls the ispf =0 options DATA, STD. MAX?

2021-12-24 Thread Seymour J Metz
Are you sure that the other user has his TN3270 client set to 3279? Does the 
user have a split screen? Is he going to the option 0 screen from another 
screen, e.g., using the SETTINGS command?


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of Jim 
Mooney [0271a2edf589-dmarc-requ...@listserv.ua.edu]
Sent: Thursday, December 23, 2021 5:44 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: What controls the ispf =0 options DATA, STD. MAX?

Hello list,

I have an ISPF Settings; Terminal Characteristics; Screen format mystery!

I have been searching but cannot find what causes DATA, & Max to be 'greyed 
out' on the setting panel (=0).
I have a user who cannot set Screen format to 3 (Max).
I can choose any of the options, but this user cannot select anything except 
'2' (Std).

With my userid I use the same settings
   the same logon proc;
   the same logmode -D4A32XX3,
   the same emulator settings - TN3270+; IBM-Dynamic; terminal 3279; custom 
size: 60 rows & 160 cols.

...and I am able to choose any Screen format, but the other user cannot change 
from '2'.

So I'm throwing this our for any ISPF experts out there.

Is there some ISPF parm conflict that disables all but the Std option?
Or
Is there something other than logmode and emulator that controls which Screen 
Format options are available to each ISPF user?

Any ideas as to what I am missing?

Any input is appreciated. I am mystified. Also, I find nothing in the archives 
about this.

Thx much!

Jim

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Unemployed

2021-12-24 Thread Seymour J Metz
Repeating insults in the same message in which you are telling others to end it 
is hypocritical.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of 
Bill Johnson [0047540adefe-dmarc-requ...@listserv.ua.edu]
Sent: Thursday, December 23, 2021 10:55 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Unemployed

Since only I seem to get the attacks from the dirty dozen or so, I’m going to 
pass along Eric’s recommendation.
I'll tell you the same thing Eric tells his children: I don't care who started
it. End it.

Act like a mature mainframer.


Sent from Yahoo Mail for iPhone


On Thursday, December 23, 2021, 5:42 PM, Bob Bridges  
wrote:

Boy, ~I~ sure have.  I'm pretty sure I've been fired from more employment gigs 
than I've left voluntarily.  (I'm not counting contract gigs, which of course 
always end eventually in the client sending you home.)

I don't think I have any records indicating what's the longest I've been 
unemployed.  Nine months, maybe?

---
Bob Bridges, robhbrid...@gmail.com, cell 336 382-7313

/* Even nowadays a man can't step up and kill a woman without feeling just a 
bit unchivalrous.  -Robert Benchley */

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Bill Johnson
Sent: Thursday, December 23, 2021 12:09

I’ve worked with hundreds of peopleAnd I’ve never been unemployed in my 40 
yeats.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: article about ransomeware and mainframe

2021-12-24 Thread Bill Johnson
Well, we certainly know AWS isn’t unbreakable. And I wonder if Capital One 
still thinks moving off the mainframe was a smart move? I doubt it. 190 million 
in fines is probably more than what their mainframe cost. Many times over.



Sent from Yahoo Mail for iPhone


On Friday, December 24, 2021, 12:03 AM, David Crayford  
wrote:

Here we go again. Bulls**t Bill is spouting his usual ignorant nonsense. 
One of my colleagues was working in the z/OS Unix team at the time of 
the Logica breach and was part of the team who performed a detailed, 
forensic investigation. The fact is that a hacker exploited a serious 
zero day vulnerability and had complete control of the system. I'm 
privileged to work with some of the best mainframe experts in the world 
and they all take secure engineering very seriously.  People like you 
who assume the mainframe is unbreakable are dangerous.

On 21/12/21 9:47 pm, Bill Johnson wrote:
> Rehash of Nordea (2012) and all the mainframe hacks since. (Zero) Yes, if you 
> don’t take precautions, you too can join Nordea in the stupidity hall of fame.
>
>
> Sent from Yahoo Mail for iPhone
>
>
> On Tuesday, December 21, 2021, 8:43 AM, Barkow, Eileen 
> <02bc504b1642-dmarc-requ...@listserv.ua.edu> wrote:
>
> This is the real link to the article
>
> https://public.milcyber.org/activities/magazine/articles/2021/renda-ransomware-and-the-ibm-zos-mainframe-big-iron
>
>
>
> From: Barkow, Eileen
> Sent: Tuesday, December 21, 2021 8:37 AM
> To: IBM Mainframe Discussion List (IBM-MAIN@listserv.ua.edu) 
> 
> Cc: Renda, Paul 
> Subject: article about ransomeware and mainframe
>
>
> This article was written by Paul Renda, who is one of our colleagues in the 
> RACF security group.
>
>
>
> https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.realcleardefense.com%2F=04%7C01%7CEBarkow%40doitt.nyc.gov%7C83d7e2a8d8c94c3ef06a08d9c47eacc6%7C73d61799c28440228d4154cc4f1929ef%7C0%7C0%7C637756870611033992%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=cJPoABb4zN%2BjjdtzetU936rkBhnnnSgSlROmjbCDsfw%3D=0
>
>
>
> 
>
> This e-mail, including any attachments, may be confidential, privileged or 
> otherwise legally protected. It is intended only for the addressee. If you 
> received this e-mail in error or from someone who was not authorized to send 
> it to you, do not disseminate, copy or otherwise use this e-mail or its 
> attachments. Please notify the sender immediately by reply e-mail and delete 
> the e-mail from your system.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
>
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Help with switching an IP:PORT to TLS V1.2

2021-12-24 Thread John S. Giltner, Jr.
If you have access to OpenSSL you can issue the command:

 echo /dev/null  | openssl s_client -showcerts  -connect address:port -ssl3

If SSLv3 then the 1st line returned will end with "SSL alert number 70" or "SSL 
alert number 40".  If it is supported you will see the certs.

You can change -ssl3 to -tsl1_2 to verify that it is supporting TLS V1.2.

Rocket Software has a port of OpenSSL that will run on z/OS, or you can get it 
for Linux.  Not sure if there is a Windows version, but I run it under Cygwin 
on Windows.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN