Has anyone set up the SSL server in z/VM 5.4? There are a couple of BFS
that need to be set up and I was wanting to know an approximate size,
(number of blocks) to define.
They would be:
SSLSERV - SSL server work file
GSKSSLDB - SSL key database
I would think either one would need to be very
Subject: [IBMVM] z/VM SSL server
Has anyone set up the SSL server in z/VM 5.4? There are a couple of BFS
that need to be set up and I was wanting to know an approximate size,
(number of blocks) to define.
They would be:
SSLSERV - SSL server work file
GSKSSLDB - SSL key database
I would
On Saturday, 03/06/2010 at 01:09 EST, Gentry, Stephen
stephen.gen...@lafayettelife.com wrote:
Has anyone set up the SSL server in z/VM 5.4? There are a couple of BFS
that
need to be set up and I was wanting to know an approximate size, (number
of
blocks) to define.
The system comes
Date: Wed, 25 Mar 2009 18:32:58 -0400
From: Rich Greenberg ric...@panix.com
Subject: Re: Question about separate TCP stacks and SSL
server machines
To: IBMVM@LISTSERV.UARK.EDU
On: Wed, Mar 25, 2009 at 04:05:35PM -0400,Craig Dudley Wrote:
} Do I need a TCPIP DATA (with TCPIPUSERID TCPIPW2H
Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Craig Dudley
Sent: Wednesday, March 25, 2009 4:06 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Question about separate TCP stacks and SSL server machines
Hi,
I am trying to set up a 2nd TCPIP/IP stack (TCPIPW2H
Hi,
I am trying to set up a 2nd TCPIP/IP stack (TCPIPW2H) along with
a 2nd SSL server (SSLSRV1). When I start up SSLSRV1 manually I
get these messages:
DTCSSL002I main(): calling CQadminMain()...
DTCSSL126E setibmsockopt() failed; rc: -1 errno: 1123
DTCSSL095E errno detail: 1123 = EDC8123I Socket
On: Wed, Mar 25, 2009 at 04:05:35PM -0400,Craig Dudley Wrote:
} Do I need a TCPIP DATA (with TCPIPUSERID TCPIPW2H) on SSLSRV1s A-disk
} for SSLSRV1 to use TCPIPW2H as its stack?
Yes.
--
Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353
Eastern time. N6LRT I speak
the 592 to the 191, inserting the TCPIPUSERID of
your choice. This way changes in your TCPIP DATA will be reflected in the
SSL server automatically. (Thou Shalt Not Keep A Static Copy of TCPIP
DATA on any user's or server's A-disk.
Be sure you look at Chapter 4 before you write such an exit
System [mailto:ib...@listserv.uark.edu]on
Behalf Of Tyler Koyl
Sent: Tuesday, March 10, 2009 6:31 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SSL Server on z/VM 5.4 RSU 802
Thanks. Thats was it. I found the enablement PTFs and installed them. This is a
real PITA. From having to figure out that ssl
My next question is whether I should be going with Static SSL or Dynamic SSL/TLS
connections? I have setup the Static SSL for Telnet by adding the following to
my TCPIP Profile:
AUTOLOG
SSLSERV 0
FTPSERVE 0
ENDAUTOLOG
PORT
20 TCP FTPSERVE NOAUTOLOG ; FTP SERVER
21 TCP
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on
Behalf Of Tyler Koyl
Sent: Wednesday, March 11, 2009 1:17 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic
SSL\TLS
My next question is whether I should
ib...@listserv.uar
K.EDU Subject
Re: SSL Server on z/VM 5.4 RSU 802 -
Static SSL vs
Yes and add the line for 992 ..
or just change your 23 to 992 ..
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on
Behalf Of Tyler Koyl
Sent: Wednesday, March 11, 2009 1:52 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SSL Server on z/VM 5.4 RSU 802
On Wednesday, 03/11/2009 at 02:17 EDT, Tyler Koyl tyler.k...@viterra.ca
wrote:
My next question is whether I should be going with Static SSL or Dynamic
SSL/TLS
connections?
That depends on your client capability. Some older telnet clients can't
negotiate a secure connection.
PORT
23
z/VM Operating cc
System
ib...@listserv.uarSubject
K.EDU Re: SSL Server on z/VM 5.4 RSU
Testing out z/VM 5.4 and would like to implement secure telnet, ftp etc using
the SSL server. I have gone through the TCPIP configuration and certificate
database creation of the SSL server but I get the following from SSLSERV when
the server is autologged by TCPIP:
DTCRUN1022I Console log
I don't know.. do you have the SSL enabling PTF's on?
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on
Behalf Of Tyler Koyl
Sent: Tuesday, March 10, 2009 4:31 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: SSL Server on z/VM 5.4 RSU 802
Testing out z/VM
K.EDU Subject
Re: SSL Server on z/VM 5.4 RSU 802
03/10/2009 03:34 PM
Tyler:
Did you check the PSP bucket? Rule no. 1, always check the PSP bucket.
http://www.vm.ibm.com/related/tcpip/psp-540.html
Jim
I'm working on setting up the new SSL server that comes with zVM 5.4.0
so that it can handle TLS for incoming SMTP server. Actually, there are
two SMTP servers on two different TCPIP stacks. Can one SSL server handle
both, or should I set up a separate one for each? Can multiple SSL servers
On Tuesday, 01/27/2009 at 09:55 EST, Martha McConaghy u...@vm.marist.edu
wrote:
I'm working on setting up the new SSL server that comes with zVM 5.4.0
so that it can handle TLS for incoming SMTP server. Actually, there are
two SMTP servers on two different TCPIP stacks. Can one SSL server
VPTF4545
PUT2PROD
SERVICE takes care of setting up the environment for you. You can run
it on MAINT, even if the component has a separate service userid.
I ran SERVICE and PUT2PROD for the SSL server PTF today, and it worked
just fine. I haven't actually started the server, but I'm confident
Dear all,
I have noted that APAR PK65850 for enabling the CMS SSL Server is closed
and
a PTF is available. I ordered and downloaded the PTF.
However I am not totally sure how to apply this PTF. Up to now I had only
appied the stacked RSU from MAINT. When I try to run a
VMFREC ppf 5VMTCP40
We are installing z/VM 5.3 and the SSL Server. I could use some help
with a few items.
1. We can't find any place to tell SSL Server that our TCP/IP
machine isn't named TCPIP.
2. Can a single SSL Server svm work with more than one stack
machine, or do we have to create one for each
On Feb 7, 2008, at 1:21 PM, Strasser, [EMAIL PROTECTED] wrote:
We are installing z/VM 5.3 and the SSL Server. I could use some help
with a few items.
We can’t find any place to tell SSL Server that our TCP/IP machine
isn’t named “TCPIP”.
Does it need to know? As long as PROFILE TCPIP
On Thursday, 02/07/2008 at 02:22 EST, Strasser, [EMAIL PROTECTED]
[EMAIL PROTECTED] wrote:
We are installing z/VM 5.3 and the SSL Server. I could use some help
with a few
items.
We can?t find any place to tell SSL Server that our TCP/IP machine isn?t
named
?TCPIP?.
I think he pulls
Thanks David, and a Merry Christmas to you.
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of David Boyes
Sent: Tuesday, December 18, 2007 1:46 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: MEMO XMASGIFT: SSL Server Enabler 2.0 available
Thanks, Santa!
Suleiman Shahin
Date: Tue, 18 Dec 2007 14:46:29 -0500From: [EMAIL PROTECTED]: MEMO XMASGIFT:
SSL Server Enabler 2.0 availableTo: IBMVM@LISTSERV.UARK.EDU
In the tradition of VM/SHARE holiday gifts, and as we promised a while ago, a
version of our SSL Server Enabler
Greetings,
I used the Debian SSL Enabler from SNA on zVM 5.1 until yesterday when I
migrated to zVM
5.3 when it stopped working.
I found a couple of errors and corrected them but still no go and I am still
scratching my head.
Has any one tried Debian SSL Enabler from SNA on 5.3 and can tell
It would help if you supplied us what errors you're seeing, and what you
see in the TCPIP log.
I used the Debian SSL Enabler from SNA on zVM 5.1 until yesterday when I
migrated to zVM
5.3 when it stopped working.
I found a couple of errors and corrected them but still no go and I am
still
David,
The interface between SSLSERV and TCPIP has changed in z/VM 5.3. See:
http://www.vm.ibm.com/related/tcpip/tcprl2rl.html#rl2ssl
Does Sine Nomine have a version of the SSL
Enabler incorporating the appropriate RPM for z/VM 5.3?
Thanks,
Mark
At 02:25 PM 8/27/2007, David Boyes wrote:
Hello Dave,
I am not seeing any errors, but I can attach the log from TCPIP and SSLSERV.
Suleiman Shahin
Date: Mon, 27 Aug 2007 14:25:06 -0400From: [EMAIL PROTECTED]: Re: Debian SSL
ServerTo: IBMVM@LISTSERV.UARK.EDU
It would help if you supplied us what errors you’re seeing, and what
Does Sine Nomine have a version of the SSL Enabler incorporating the
appropriate RPM for z/VM 5.3?
Not yet. It's behind a few other significant pieces of paying work at
the moment. It's a few weeks away at best.
More later.
-- db
Thanks David. Glad to hear you're getting paying work. :-)
Mark
At 03:08 PM 8/27/2007, you wrote:
Does Sine Nomine have a version of the SSL Enabler incorporating the
appropriate RPM for z/VM 5.3?
Not yet. It's behind a few other significant pieces of paying work
at the moment. It's a few
Dave,
I am attaching the TCPIP log for you to look at if you wish.
Thanks. Suleiman Shahin
Date: Mon, 27 Aug 2007 15:41:22 -0400From: [EMAIL PROTECTED]: Re: Debian SSL
ServerTo: [EMAIL PROTECTED] David. Glad to hear you're getting paying work.
:-)MarkAt 03:08 PM 8/27/2007, you wrote:
Does the Sinenomine Debian SSL Server Enabler 2.1 work with Z/VM 5.3 and
support FTP client and server secure connections?
Jim Hughes
603-271-5586
There's no sense in being precise when you don't even know what you're
talking about.
John von Neumann
Does the Sinenomine Debian SSL Server Enabler 2.1 work with Z/VM 5.3
and
support FTP client and server secure connections?
The current version does work on 5.3, but is based on the 5.2 SSL code
and thus has the limitations of the 5.2 code.
We're looking at doing a 5.3 version of the SSL
Chocolates!! What Chocolates?
Comes with the paid support option.
You have to settle for cinnamon rolls if you just mooch the free
version...
-- db
Folks,
Anybody have any suggestions as to the distro to use for the SSL server
for TCPIP?
We are going to be setting up SSL servers, and are thinkig about what bas
e
Linux to use, obviously it should be a small one, but does anybody on the
list have a suggestion?
Thanks,
Brian Ferguson
: Brian Ferguson [EMAIL PROTECTED]
Reply-To: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU
Date: Thu, 1 Feb 2007 11:22:08 -0600
Folks,
Anybody have any suggestions as to the distro to use for the SSL server
for TCPIP?
We are going to be setting up SSL servers, and are thinkig
Only SuSE and RH are officially supported by IBM. Both are not
particularly small. We provide a small appliance configuration that
seems to meet some people's needs.
I second this recommendation. Sine Nomine's SSLSERV has worked wonderfull
y
since I put it in. As indicated, this is a DDR restore and run distributi
on.
No package selection, no maintenance needed for the linux operating syste
m.
Then you have to add the IBM VMSSL stuff on top and then add a
I can recommend the SSL appliance thingy that Sine Nomine Associates
offers...it works well, installs easily via DDR, and comes with a nice
box of assorted chocolates.
DJ
Brian Ferguson wrote:
Folks,
Anybody have any suggestions as to the distro to use for the SSL server
for TCPIP
Tom,
Did you get chocolates too?
Thomas Kern wrote:
I second this recommendation. Sine Nomine's SSLSERV has worked wonderfull
y
since I put it in. As indicated, this is a DDR restore and run distributi
on.
No package selection, no maintenance needed for the linux operating syste
m.
Then you
Did you get chocolates too?
You can also choose the coupon for cinnamon rolls. Personally, I recommend
the rolls. Chocolate is so yesterday. 8-)
-- db
I didn't know I was supposed to get chocolates with SSLSERV. They might h
ave
made my certificate problems more bareable.
/Tom
On Thu, 1 Feb 2007 12:57:27 -0600, Rich Smrcina [EMAIL PROTECTED] wrot
e:
Tom,
Did you get chocolates too?
Thomas Kern wrote:
I second this recommendation. Sine
Sent: February 1, 2007 2:56 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SSL Server for z/VM
I didn't know I was supposed to get chocolates with SSLSERV. They might h=
ave
made my certificate problems more bareable.
/Tom
On Thu, 1 Feb 2007 12:57:27 -0600, Rich Smrcina [EMAIL PROTECTED] wrot=
e
47 matches
Mail list logo
