Re: Certificate problem

[Phil Smith III]

Colin Paice replied, basically confirming what I'd found. In retrospect it
all feels silly but ain't that usually the case? Thanks again!


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: VSMLIST question

[Joseph Reichman]

Sorry 

But you are right I once again  failed to read documentation in regard to the 
high order bit being on 

REAL31
If the storage block is backed in real 31-bit or 64-bit storage, the high bit 
indicator is on (one). If
the storage block is backed in real 24-bit storage, the high bit indicator is 
off (zero). The low bit
and second lowest bit indicators are always off

regarding my out put from VSMLIST

 the documentation says that when coding VSMLIST SP=PVT,SPACE=FREE the 
allocated information block is followed by the free block
descriptor

 So if block descriptor for the allocated block and I am typing this address 
from screen prints that I took of the output of VSMLIST
with SP=PVT,SPACE=FREE

 7F706000 0001000 0001 7F706000 0F28 what I do is add the 
address and block length 7F706000 + 1000 this gives me
7F707000 I then add the entry or the last entry of the free block descriptor 
7F7006000 + F28 = 77F06F28 this number 7F706F28 is the
starting address of the allocated storage I want to verify or VSMLOC the length 
is the first total minus the second 7f707000 -
7f706f28 = D8 using this address and length I get return code 0 and tcb address 
in register 1. I also realize the there can be more
than 1 free block  descriptor following so I use the last

I now understand this because when VSM allocated storage it gets it in 4k 
chucks the allocation starts from high to low 

Whether you know it or not you helped me figure it out 

Thank you

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Peter Relson
Sent: Friday, September 9, 2022 1:00 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: VSMLIST question

Joe,

You're saying that you did get output of
0001 7F88 1000 0001 7FF88 0500 within the returned data 
from the VSMLIST invocation you had shown?

I can't think of a way that that would be OK. Unless I'm forgetting something, 
it would be APARable and I'd encourage you to explore
that direction.

Regarding the high bit, it's documented. Specifically, "Format of Allocated 
Block Descriptor" with
https://www.ibm.com/docs/en/zos/2.5.0?topic=area-allocated-storage-information

You're treading dangerously, again, in the waters of providing incomplete 
information.
You didn't provide complete information about your VSMLIST output, you didn't 
show how you had invoked VSMLOC and with what values
when you said it didn't work, and  now, with "FF7A5000", you show just the 
single address. Your thought about what that is is likely
correct, but don't make us guess (the folks kindly helping out on IBM-Main, 
whether IBMers, customers, or ISVs have real work to do
too). I choose not to participate in such a game.

Peter Relson
z/OS Core Technology Design


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO
IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Rant: Why doesn't SVCUPDTE accept an RS form for EPNAME?

[Tony Harminc]

On Fri, 9 Sept 2022 at 03:32, Binyamin Dissen 
wrote:

> Unless you are using a hard coded name, you must determine the module
> address
> and provide it as EP.
>

Use MF=E and MF=L, and update the name in the argument list yourself? No -
wait - it looks as though EPNAME supports an RS address on the MF=E form.

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ICSF Utilities

[Allan Staller]

Classification: Confidential

That was it. The programs are CSDFILEN (encrypt) and CSDFILDE (decrypt).

Many thanks Eric,

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Eric D Rossman
Sent: Friday, September 9, 2022 12:24 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: ICSF Utilities

[CAUTION: This Email is from outside the Organization. Unless you trust the 
sender, Don't click links or open attachments as it may be a Phishing email, 
which can steal your Information and compromise your Computer.]

Are you referring to Encryption Facility?

https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ibm.com%2Fdocs%2Fen%2Fzos%2F2.5.0%3Ftopic%3Dcustomizing-overview-encryption-facility-zosdata=05%7C01%7Callan.staller%40HCL.COM%7Cd30eebea38ac417df7c108da928817e3%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637983410483749677%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=ZpJUVrn1FY4LVOcXuUHf4SSiPlkXkubCEa4dvQDTxv8%3Dreserved=0

It is a separate product from ICSF but uses ICSF services for functionality.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Allan Staller
Sent: Friday, September 9, 2022 1:20 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] ICSF Utilites

Classification: Confidential

Long long ago, in a land far far away...

IBM supplied some simple batch utilities w/ICSF that would input a file and 
output and encrypted version of that file (and vice versa).
I can't seem to find any references to these utilities in the current doc.

Does anyone remember the name of these fine utilities?

TIA,
::DISCLAIMER::

The contents of this e-mail and any attachment(s) are confidential and intended 
for the named recipient(s) only. E-mail transmission is not guaranteed to be 
secure or error-free as information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or may contain viruses in transmission. 
The e mail and its contents (with or without referred errors) shall therefore 
not attach any liability on the originator or HCL or its affiliates. Views or 
opinions, if any, presented in this email are solely those of the author and 
may not necessarily reflect the views or opinions of HCL or its affiliates. Any 
form of reproduction, dissemination, copying, disclosure, modification, 
distribution and / or publication of this message without the prior written 
consent of authorized representative of HCL is strictly prohibited. If you have 
received this email in error please delete it and notify the sender 
immediately. Before opening any email and/or attachments, please check them for 
viruses and other defects.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ICSF Utilities

[Allan Staller]

Classification: Confidential

I will check. Thanks for the pointer.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Eric D Rossman
Sent: Friday, September 9, 2022 12:24 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: ICSF Utilities

[CAUTION: This Email is from outside the Organization. Unless you trust the 
sender, Don't click links or open attachments as it may be a Phishing email, 
which can steal your Information and compromise your Computer.]

Are you referring to Encryption Facility?

https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ibm.com%2Fdocs%2Fen%2Fzos%2F2.5.0%3Ftopic%3Dcustomizing-overview-encryption-facility-zosdata=05%7C01%7Callan.staller%40HCL.COM%7Cd30eebea38ac417df7c108da928817e3%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637983410483749677%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=ZpJUVrn1FY4LVOcXuUHf4SSiPlkXkubCEa4dvQDTxv8%3Dreserved=0

It is a separate product from ICSF but uses ICSF services for functionality.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Allan Staller
Sent: Friday, September 9, 2022 1:20 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] ICSF Utilites

Classification: Confidential

Long long ago, in a land far far away...

IBM supplied some simple batch utilities w/ICSF that would input a file and 
output and encrypted version of that file (and vice versa).
I can't seem to find any references to these utilities in the current doc.

Does anyone remember the name of these fine utilities?

TIA,
::DISCLAIMER::

The contents of this e-mail and any attachment(s) are confidential and intended 
for the named recipient(s) only. E-mail transmission is not guaranteed to be 
secure or error-free as information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or may contain viruses in transmission. 
The e mail and its contents (with or without referred errors) shall therefore 
not attach any liability on the originator or HCL or its affiliates. Views or 
opinions, if any, presented in this email are solely those of the author and 
may not necessarily reflect the views or opinions of HCL or its affiliates. Any 
form of reproduction, dissemination, copying, disclosure, modification, 
distribution and / or publication of this message without the prior written 
consent of authorized representative of HCL is strictly prohibited. If you have 
received this email in error please delete it and notify the sender 
immediately. Before opening any email and/or attachments, please check them for 
viruses and other defects.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ICSF Utilities

[Eric D Rossman]

Are you referring to Encryption Facility?

https://www.ibm.com/docs/en/zos/2.5.0?topic=customizing-overview-encryption-facility-zos

It is a separate product from ICSF but uses ICSF services for functionality.

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Allan Staller
Sent: Friday, September 9, 2022 1:20 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] ICSF Utilites

Classification: Confidential

Long long ago, in a land far far away...

IBM supplied some simple batch utilities w/ICSF that would input a file and 
output and encrypted version of that file (and vice versa).
I can't seem to find any references to these utilities in the current doc.

Does anyone remember the name of these fine utilities?

TIA,
::DISCLAIMER::

The contents of this e-mail and any attachment(s) are confidential and intended 
for the named recipient(s) only. E-mail transmission is not guaranteed to be 
secure or error-free as information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or may contain viruses in transmission. 
The e mail and its contents (with or without referred errors) shall therefore 
not attach any liability on the originator or HCL or its affiliates. Views or 
opinions, if any, presented in this email are solely those of the author and 
may not necessarily reflect the views or opinions of HCL or its affiliates. Any 
form of reproduction, dissemination, copying, disclosure, modification, 
distribution and / or publication of this message without the prior written 
consent of authorized representative of HCL is strictly prohibited. If you have 
received this email in error please delete it and notify the sender 
immediately. Before opening any email and/or attachments, please check them for 
viruses and other defects.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

ICSF Utilites

[Allan Staller]

Classification: Confidential

Long long ago, in a land far far away...

IBM supplied some simple batch utilities w/ICSF that would input a file and 
output and encrypted version of that file (and vice versa).
I can't seem to find any references to these utilities in the current doc.

Does anyone remember the name of these fine utilities?

TIA,
::DISCLAIMER::

The contents of this e-mail and any attachment(s) are confidential and intended 
for the named recipient(s) only. E-mail transmission is not guaranteed to be 
secure or error-free as information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or may contain viruses in transmission. 
The e mail and its contents (with or without referred errors) shall therefore 
not attach any liability on the originator or HCL or its affiliates. Views or 
opinions, if any, presented in this email are solely those of the author and 
may not necessarily reflect the views or opinions of HCL or its affiliates. Any 
form of reproduction, dissemination, copying, disclosure, modification, 
distribution and / or publication of this message without the prior written 
consent of authorized representative of HCL is strictly prohibited. If you have 
received this email in error please delete it and notify the sender 
immediately. Before opening any email and/or attachments, please check them for 
viruses and other defects.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: VSMLIST question

[Peter Relson]

Joe,

You're saying that you did get output of
0001 7F88 1000 0001 7FF88 0500
within the returned data from the VSMLIST invocation you had shown?

I can't think of a way that that would be OK. Unless I'm forgetting something, 
it would be APARable and I'd encourage you to explore that direction.

Regarding the high bit, it's documented. Specifically, "Format of Allocated 
Block Descriptor" with
https://www.ibm.com/docs/en/zos/2.5.0?topic=area-allocated-storage-information

You're treading dangerously, again, in the waters of providing incomplete 
information.
You didn't provide complete information about your VSMLIST output, you didn't 
show how you had invoked VSMLOC and with what values when you said it didn't 
work, and  now, with "FF7A5000", you show just the single address. Your thought 
about what that is is likely correct, but don't make us guess (the folks kindly 
helping out on IBM-Main, whether IBMers, customers, or ISVs have real work to 
do too). I choose not to participate in such a game.

Peter Relson
z/OS Core Technology Design


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: Speaking of SCRT

[Carmen Vitullo]

Got ya!

the process I took over was quit easy but did take a little work, I 
updated the dates for the SMF extract job, submitted the job, then I ran 
the scrt job, then uploaded the scrt csv file to my workstation, submit 
to LMS, if they plan on automating this process, I wonder if they're 
planning on using z/osmf?


currently those duties are segregated here, one person runs the extract 
and scrt job, she sends this to our acquisitions group, they submit the 
reports to IBM, to me seems more work than it needs to be.


I'll be watching for updates and I'll pass them along, it will be 
interesting to see how they plan on automating the process.


thanks Rex

Carmen

On 9/9/2022 9:03 AM, Pommier, Rex wrote:

Hi Carmen,

Until they took it away, we would get a notification from the mainframe that the report 
was ready to look at.  We'd check it for the "missing data" and if it was 
there, fix the CSV on the mainframe.  Then our scheduler would just e-mail the corrected 
report to IBM - all automated.  IBM indicated to me that there is supposedly some way of 
automating the submission to the LMS web site but they gave no indication as to how to do 
that.

Rex

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Carmen Vitullo
Sent: Friday, September 9, 2022 8:41 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: Speaking of SCRT

I've not done this for about 8 years, but I've always had to submit the report 
via the LMS system on IBM's site

you upload the report , via license managed software, if there's an exception , 
missing SMF data over and hour I think, it will flag that missing data and you 
have to comment on why there's an exception, that's all I recall


Carmen


On 9/9/2022 8:37 AM, Pommier, Rex wrote:

Hi list,

I'd like to know how you are submitting your SCRT reports to IBM.  Since they 
just stopped accepting reports via e-mail we are manually uploading them to 
IBM.  Would somebody be willing to share what they've done to automate this 
submission using the web interface?

Thanks,

Rex

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: Speaking of SCRT

[Pommier, Rex]

Hi Carmen,

Until they took it away, we would get a notification from the mainframe that 
the report was ready to look at.  We'd check it for the "missing data" and if 
it was there, fix the CSV on the mainframe.  Then our scheduler would just 
e-mail the corrected report to IBM - all automated.  IBM indicated to me that 
there is supposedly some way of automating the submission to the LMS web site 
but they gave no indication as to how to do that.  

Rex

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Carmen Vitullo
Sent: Friday, September 9, 2022 8:41 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: Speaking of SCRT

I've not done this for about 8 years, but I've always had to submit the report 
via the LMS system on IBM's site

you upload the report , via license managed software, if there's an exception , 
missing SMF data over and hour I think, it will flag that missing data and you 
have to comment on why there's an exception, that's all I recall


Carmen


On 9/9/2022 8:37 AM, Pommier, Rex wrote:
> Hi list,
>
> I'd like to know how you are submitting your SCRT reports to IBM.  Since they 
> just stopped accepting reports via e-mail we are manually uploading them to 
> IBM.  Would somebody be willing to share what they've done to automate this 
> submission using the web interface?
>
> Thanks,
>
> Rex
>
> --
> The information contained in this message is confidential, protected from 
> disclosure and may be legally privileged. If the reader of this message is 
> not the intended recipient or an employee or agent responsible for delivering 
> this message to the intended recipient, you are hereby notified that any 
> disclosure, distribution, copying, or any action taken or action omitted in 
> reliance on it, is strictly prohibited and may be unlawful. If you have 
> received this communication in error, please notify us immediately by 
> replying to this message and destroy the material in its entirety, whether in 
> electronic or hard copy format. Thank you.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Speaking of SCRT

[Carmen Vitullo]

I've not done this for about 8 years, but I've always had to submit the 
report via the LMS system on IBM's site


you upload the report , via license managed software, if there's an 
exception , missing SMF data over and hour I think, it will flag that 
missing data and you have to comment on why there's an exception, that's 
all I recall



Carmen


On 9/9/2022 8:37 AM, Pommier, Rex wrote:

Hi list,

I'd like to know how you are submitting your SCRT reports to IBM.  Since they 
just stopped accepting reports via e-mail we are manually uploading them to 
IBM.  Would somebody be willing to share what they've done to automate this 
submission using the web interface?

Thanks,

Rex

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Speaking of SCRT

[Pommier, Rex]

Hi list,

I'd like to know how you are submitting your SCRT reports to IBM.  Since they 
just stopped accepting reports via e-mail we are manually uploading them to 
IBM.  Would somebody be willing to share what they've done to automate this 
submission using the web interface?

Thanks,

Rex

--
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Real fun for companies on older machines & SCRT

[John McKown]

I just found out that IBM will be releasing version 29 of the SCRT program
on 15Oct2022. Version 28 reports will be accepted only up to the Nov2022
report (submitted in Dec2022), at which time only version 29 reports will
be accepted. Version 29 of SCRT requires Java 8.

I just tested this out at work using Java 8 instead of Java 7. Java 8
reports that it will not run on a z9BC. "Processor detected (z9) does not
support instruction MVGHI" .

This is going to be fun. A sister company is on a z15, running z/OS. So
perhaps they will be tasked to take our SMF data, produce the SCRT report,
and then upload it to IBM. But perhaps they will give me an ID on their
system to do this.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Rant: Why doesn't SVCUPDTE accept an RS form for EPNAME?

[Colin Paice]

raise an RFE. 

On Fri, 9 Sept 2022 at 08:32, Binyamin Dissen 
wrote:

> Unless you are using a hard coded name, you must determine the module
> address
> and provide it as EP.
>
> Why this restriction? Most annoying.
>
> --
> Binyamin Dissen 
> http://www.dissensoftware.com
>
> Director, Dissen Software, Bar & Grill - Israel
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Certificate problem

[Colin Paice]

Going back to the first message...

I'm getting this trying to use a self-signed certificate. I put it into
gskkyman and when I try to connect (outbound from z/OS) I get

Certificate validation error

from GSK_SECURE_SOCKET_INIT. Running a gsktrace shows:
09/07/2022-17:30:14 Thd-1 ERROR check_cert_extensions_3280_and_later():

*Basic Constraints extension must be critical for CA Certificate*

For my CA with OPENSSL  I have openssl-ca.cnf file with


[ req_extensions ]

subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid:always ! issuer:alwaysz
*basicConstraints   = critical,CA:TRUE, pathlen:0*
keyUsage   = keyCertSign, digitalSignature,cRLSign

It looks like you may not have this,

On Linux I use

openssl x509 -in cs256.pem -text -noout|less

and it gives me

X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:AF:55:C7:
X509v3 Authority Key Identifier:
keyid:58:30:...






*X509v3 Basic Constraints: criticalCA:TRUE, pathlen:0
  X509v3 Key Usage: Digital Signature,
Certificate Sign, CRL Sign*


Display your certificate, and check it.

Colin

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Rant: Why doesn't SVCUPDTE accept an RS form for EPNAME?

[Binyamin Dissen]

Unless you are using a hard coded name, you must determine the module address
and provide it as EP.

Why this restriction? Most annoying.

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN