Re: Continuing :2001 problems

I agree with Roberto. You need to upgrade your ciphers on IBM i. I'm
going through this now. Domino first.

There is a workaround in browsers. There's is an option on many of them
to turn on and allow crappy ciphers. Many of them plan on removing that
option.

Read the following:
http://www-01.ibm.com/support/docview.wss?uid=nas8N1019971
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020876
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020681

Pay close attention to this on the right:
Modified date:
YYYY-MM-DD

Staying current with ciphers is important. Failure to do so may:
- Have you fail security audits.
- Have a browser update no longer connect to your system (ya think?)
- Expose your data.

Do NOT just put on a cume and think all is well!!!
Security patches come out much more frequently.
New Hiper and security groups for 7.1 came out just this week.
http://www-912.ibm.com/s_dir/sline003.NSF/GroupPTFs?OpenView&Start=1&Count=30&Expand=2#2
- Cumulative package C5317710 began shipping worldwide: 19 Nov 2015.
http://www-912.ibm.com/s_dir/sline003.nsf/2d3aff1c6b4d6ce086256453000d971e/c69211d3133949f886257c1c00513742?OpenDocument

IBM does a great job of monitoring CVE's and getting out new PTF's.

Many of the cipher PTF's go into 5733SC1, which is:
IBM Portable Utilities for i, and,
OpenSSH, OpenSSL, zlib


Rob Berendt