Re: V7R1 is not supported anymore (at least for SSL ciphers)

On Tue, Dec 20, 2016 at 9:20 AM, Rob Berendt <rob@xxxxxxxxx> wrote:

Question: Do we have notification letters, etc from trading partners
which state such things as:
"DoWe, Cheatem, and Howe will only accept the following ciphers after
YYYY-MM-DD"?
I can understand such a notification getting lost in the shuffle but it
would be nice to know if they've made a good faith effort.
I think we got dinged by an important customer we do sftp with on a
related issue.

I personally have never seen such a notification. But to be fair, they
wouldn't send them to me.

Even from Google or Microsoft (who last week really mucked things up for a
few of my customers) I've not seen any mention when the update SSL Certs..

The only reason to me the ciphers and support are so important is because
the IBM i, unlike most other platforms, rarely if ever update their CA
trust list with well known CAs.

So we have to do it manually for pretty much each and every server we
connect to (FTPS, GETURI, HTTPAPI, MAILTOOL, etc). Any client that uses
SSL/TLS for connectivity. Unless we turn off strict SSL and ignore not
trusted errors, which I don't feel is a great long term idea and
unfortunately doesn't help in this particular case.

Brad
www.bvstools.com