Re: SSL Cipher Support and V7R1... and so it begins

I am doing exactly that for a couple customers right now. I believe I
have an article at fieldexit.com about it and posted about it here a
while back.

It's a poor solution I think (upgrading is inevitable, so rip the
bandaid off!), but to keep things rolling I will try to help as much
as possible. Trying to figure out what to charge for such a service
is also something else. :)

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any
Cloud Provider!

On Fri, Jul 14, 2017 at 4:10 PM, Douglas Handy <dhandy@xxxxxxxxx> wrote:

Brad

This issue is dealing with credit card processing companies. So far

all 3 have been processing credit cards. 1 was able to upgrade to
V7R3 overnight... which was nice. The others are basically dead in
the water.

I don't have experience with this concept, but might it be possible to use
a type of proxy server as a man in the middle? Have the V7R1 box pass the
requests to a server proxy, then have it pass each on to the credit card
company using newer ciphers and return the result back to the V7R1 box?

It might require changing the URLs to use a trusted certificate to the
proxy, who then changes the URL to the credit card company. But I suspect
it would not be hard to code up a middle layer to allow another machine to
perform the actual TLS traffic to the credit card merchant.

Obviously that box would also need to be part of any PCI compliance network
scan. But it strikes me as quicker to implement if the hardware does not
support moving to V7R2+. At least as a stop gap measure.

Doug
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: http://amzn.to/2dEadiD