Re: V7R1 is not supported anymore (at least for SSL ciphers)

[Bradley Stone <bvstone@xxxxxxxxx>]

Rob,

This really has nothing to do with browsers.  At least this specific case.

It's about keeping supported releases up to date.  Their SSL is all based
on open source (open SSL) as I recall.  It can't be that difficult to
update.

Maybe if they really want folks to upgrade OS versions more often they'd
make it easier and much less expensive.

Brad
www.bvstools.com

On Tue, Dec 20, 2016 at 7:41 AM, Rob Berendt <rob@xxxxxxxxx> wrote:

> I did find a little confirmation on that.
> http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697
>
> All the more reason to just totally drop support for IBM i 7.1.
>
> I don't expect everything to be PTF'd back.  Some are just intertwined
> with the OS; Temporal Tables are a good example.  However I don't see what
> the big deal is with ciphers.  You could try pressuring IBM for at least
> an explanation.
>
> You could blame IBM but the problem but there are also a host of other
> mitigating factors.
> - Browsers expecting no less than a certain level of encryption.
> - Audits pointing out that if you even allow a lower cipher you fail the
> audit.  This has hit us hard.
>
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1
> Group Dekko
> Dept 1600
> Mail to:  2505 Dekko Drive
>           Garrett, IN 46738
> Ship to:  Dock 108
>           6928N 400E
>           Kendallville, IN 46755
> http://www.dekko.com