Re: RPG SSL Sockets

Scott, I have written a socket server in RPG which as two components. A
Socket Server and a Worker Job that gets spawned. Works good but I am
thinking about adding SSL.

My question to you is where do you upgrade the socket to SSL. It would seem
logical to upgrade the socket to SSL in the Socket Server program before it
gets spawned to create the worker job but I was wondering.

When I spawn the new job, it passes the socket descriptor to the worker
program. If I upgrade the socket to be secure will that information be
passed to worker program or do I need to upgrade the socket after I arrive
at spawned worker job?

Hopefully this is clear. Thanks for any help.

On Wed, Nov 5, 2014 at 2:18 PM, Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>
wrote:

Here's some acticles I wrote on SSL from RPG, quite a while back, but I
don't think anything has changed:

http://iprodeveloper.com/rpg-programming/ssl-sockets-rpg-course-you-can
http://iprodeveloper.com/rpg-programming/ssl-programming-rpg

I typically let the OS choose which version of SSL/TLS it uses. That way,
as vulnerabilities are found in stuff like SSL 3.0, IBM will disable them
in the OS, and we don't have to modify the application. Likewise, as newer
versions are added to the OS (TLS 1.1, TLS 1.2, etc) it can pick those up
automatically.

-SK


On 11/5/2014 9:32 AM, Chris Bipes wrote:

We are still on V6R1 and need to upgrade an application that currently
has a persistent socket connection that is not secure. I now need to add
SSL. We are the client initiating the connection.

Does anyone have an example of a SSL Client using TLS 1.0 or better
protocols that they would be willing to share?
Chris Bipes
Director of Information Services
CrossCheck, Inc.

--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.