RE: Testing a TELNET exit point

["Sean Porterfield" <sporter@xxxxxxxxxxxx>]

> From: Pete Helgren

> Perhaps this should go to programmers topic but I think the program is
> working correctly.  What I don't know is if this program is registered at
> correct point or under the correct conditions.  What I want to accomplish
> with the program is to verify that the user who starts the telnet
> session is
> authorized to do so over an SSL connection.  The program logic looks
> correct, but I can't evaluate that if the program never gets triggered and
> that seems to be the current problem.


First of all, are you aware of the security ramifications of having an exit
point program?  Make sure users don't have authority to overwrite your
program or someone might cause you no end of trouble.

Next, you should be able to see if your program ran from DSPOBJD last used
date.

Finally, if you're goal is to make sure only certain users can use SSL, why
not create certificates for those users and require SSL users to have
certificates?  No need for an exit point program then.  (Keep in mind, by
default the certificate is good until expiration even if you delete it or
the user.)

Beyond that, you may want to post your code (probably to the RPG list).  The
portion of my code that checks for SSL is working, so even I may see
something wrong with your code, but there are far more experienced
programmers on the list than I.

Good luck!