Re: Cryptography in tn5250

[wsuetholz@xxxxxxxxxxxxxx]

There is an option that you can use, somewhere under the OpenSSL pages.
You can use a SSL wrapper program.  I haven't tried this connecting to
an AS/400, but I have done it for connections between a Unix box and a
Windows box.  This required no changes to the source code of the end 
programs.

Bill Suetholz

On 09-Aug-00 Jason M. Felice wrote:
> Seth Cohn wrote:
>> 
>> On Wed, 9 Aug 2000, Barry L. Kline wrote:
>> 
>> > Hi Jason...
>> >
>> > I was wondering if anything ever happened along these lines?  Can
>> > tn5250 take advantage of the AS/400 SSL like the CA/400 product now
>> > does?
>> >
>> > > If we can work this out, I will have an OpenSSL-enabled 5250 client
>> > > avaiable
>> > > as soon as legally allowed.
>> > >
>> > > P.S. Last I heard, the RSA patent expires in February or March of this
>> > > year.  Which means that if everything goes well, there is going to be
>> > > some
>> > > kick-butt free software real soon.
>> 
>> It's Sept of this year.... so we haven't quite hit the date yet.
>> 
>> Also, offtopic to the thread, but ontopic to the list.... if you haven't
>> checked the NIC from thinknic.com, do so.  I'm going to be adding tn5250
>> (among others things) to it (it's a CD based system) and using it to
>> replace terminals very very cheaply ($200 apiece for a full unit, +
>> monitor)  It believe that would make the cheapest complete 5250 solution
>> you can buy (new)
>> 
>> Seth
>> 
> 
> Actually, so far as I (now) understand, we can provide a stream driver
> for OpenSSL/SSLeay.  While compiling and installing OpenSSL would
> require the user to either a) not be in the US, b) obtain an RSA patent,
> or c) link against RSAREF, you can find RSAREF around, and you can
> even find binary OpenSSL packages that are all legal for US residents to
> install.
> 
> Unfortunately, I don't have the time, but a quick hack of telnetstr.c or
> copying and making a modified version of telnetstr.c would do the
> trick.  It'd take longer to research how to do than it would to
> implement (I don't know how to handle SSL keys and such...)
> 
> -Jason M. Felice
> (jfelice@cronosys.com)
> +---
>| This is the LINUX5250 Mailing List!
>| To submit a new message, send your mail to LINUX5250@midrange.com.
>| To subscribe to this list send email to LINUX5250-SUB@midrange.com.
>| To unsubscribe from this list send email to LINUX5250-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator: david@midrange.com
> +---

----------------------------------
E-Mail: wsuetholz@centonline.com
Date: 10-Aug-00
Time: 09:26:23

This message was sent by XFMail
----------------------------------
+---
| This is the LINUX5250 Mailing List!
| To submit a new message, send your mail to LINUX5250@midrange.com.
| To subscribe to this list send email to LINUX5250-SUB@midrange.com.
| To unsubscribe from this list send email to LINUX5250-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---