Re: Re: Providing web services using HTTPS -- RPG400-L

Keving and Douglas SQL web services functions are not client, there is not
any reason to call it web services function if they were client, on the
other hand FYI sql HTTP functions can retrieve information that you can
consume and can send information that your client can consume (HTTPGET/
HTTPPOST), I have made programs using this that third party java programs
use without any rest or soap configuration. this few links can give you
more detail about those functions and how to use it, the second link maybe
important for you it tells you how to send data using HTTPPOST, hope this
help.

http://www.midrangenews.com/view?id=2376&p=9

https://www.gateway400.org/documents/Gateway400/Handouts/db2i_http_functions_and_xml.pdf

https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/IBM%20i%20Technology%20Updates/page/New%20HTTP%20functions%20added%20to%20SYSTOOLS

https://www.ibm.com/developerworks/ibmi/library/i-incorporating-web-service/

http://www.mcpressonline.com/programming/web-languages/techtip-db2-for-i-http-functions-part-2-request-and-response-header-fields

https://www-356.ibm.com/partnerworld/wps/servlet/download/DownloadServlet?id=k4ixw2TAAIwiPCA$cnt&attachmentName=accessing_web_services_using_ibm_db2_for_i_udfs_and_udtfs.pdf&token=MTQ5MzE0NDI1NDk5Ng==&locale=en_ALL_ZZ

On Tue, Apr 25, 2017 at 2:30 PM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

Steps to create a web service on AS/400, test, change the default port to
80**, test, and then finally secure using SSL on the HTTP front end service.

1- Create a new user profile, BRWEB**, copy existing profile
2- Launch IBM Web Admin for i - http://10.x.xx.x:2001
3- Create a Web Services Server, take all defaults.
4- Name the service to match a specified user, matching the user to
the desired environment, BRWEBMIS, BRWEBLIV, BRWEBTRP, etc
5- Fill in description - BRC WEB Service - **
6- To test service, All Application Servers, Manage Details, Using
Test Service tab, test built in ConvertTemp function.
7- Stop both HTTP and Application Servers
8- General server configuration , change HTTP virtual host default
port from 100** to 80**. Each slice needs to use a different port
a. MIS - 8080
b. UP - 8081
c. DevD1 - 8082
d. IT - 8083
e. TP - 8084
f. SP - 8085
9- Manually edit the lwi plug-in from 10052 to 80** - wrklnk
/www/BRWEBMIS/conf/lwi-plugin-cfg.xml (Do not change Transport Host)
10- Application server, Manage Details, Properties, Web Services
Server, change Default WSDL HTTP port to 80**
11- Start both HTTP and Application server
12- Application Server, Manage Deployed Services, using Test Service
tab, test built in ConvertTemp function.
13- Stop both HTTP and Application Servers
14- Using Security tab, turn on SSL on HTTP server
a. SSL - enabled,
b. Server Certificate application name - should match name of Web
service
c. HTTPS_PORT environment variable - should be 1st port on internal
port range of Web Service.
15- Using DCM, system certificate store, Work with Server
Applications, add application.
QIBM_HTTP_SERVER_BRWEBMIS Pencor062010
16- Start both HTTP and Application servers
17- Once SSL is enabled Test Service will no longer function, was
designed to work without SSL, per IBM.
18- To test SSL using built in ConvertTemp, right click on "View
Definition" to get the URL...then paste that into a browser and change http
to https and hit enter, and you should see the xml WSDL file.

-----Original Message-----
From: RPG400-L [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of Atul
Kaulgud
Sent: Tuesday, April 25, 2017 2:16 PM
To: rpg400-l@xxxxxxxxxxxx
Subject: RE: Re: Providing web services using HTTPS

I think, we have to configure DCM(Digital Certificate Manager) and, then,
enable SSL option, associate Application ID with SSL option.
Recently I developed web service based on REST, but, unable to try out
with SSL because of missing HTTP group PTFs. We have asked to download
required PTFs and then probably we will be able to deploy SSL enabled web
service

Regards
Atul Kaulgud

-----Original Message-----
From: RPG400-L [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of
rpg400-l-request@xxxxxxxxxxxx
Sent: Tuesday, April 25, 2017 8:46 PM
To: rpg400-l@xxxxxxxxxxxx
Subject: RPG400-L Digest, Vol 16, Issue 164

Send RPG400-L mailing list submissions to
rpg400-l@xxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.midrange.com/mailman/listinfo/rpg400-l
or, via email, send a message with subject or body 'help' to
rpg400-l-request@xxxxxxxxxxxx

You can reach the person managing the list at
rpg400-l-owner@xxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific than
"Re: Contents of RPG400-L digest..."

*** NOTE: When replying to this digest message, PLEASE remove all text
unrelated to your reply and change the subject line so it is meaningful.

Today's Topics:

1. Re: Accessing Database vs Dataarea (Barbara Morris)
2. Providing web services using HTTPS (Douglas Handy)
3. Re: Providing web services using HTTPS (Bradley Stone)
4. RE: Providing web services using HTTPS (Kevin Bucknum)
5. Re: Providing web services using HTTPS (Jose Perez)
6. RE: Providing web services using HTTPS (Kevin Bucknum)

----------------------------------------------------------------------

message: 1
date: Mon, 24 Apr 2017 16:35:07 -0400
from: Barbara Morris <bmorris@xxxxxxxxxx>
subject: Re: Accessing Database vs Dataarea

On 2017-04-24 8:57 AM, Michael Quigley wrote:

...
I would love to hear from someone with some knowledge about the
internal implementation of IN. i.e., Is the data area object and
associated pointers resolved each time?

RPG does indeed resolve to the data area for each IN operation. (But if
there had been a previous IN *LOCK, it wouldn't re-resolve until there was
an OUT without *LOCK, or an UNLOCK.)

Here's a little program you can use to test this out. Create a data area
called MYDTAARA *CHAR LEN(10) in QTEMP, with value 'qtemp', and another one
in some other library that's not in your library list, with some value
other than 'qtemp'.

When the command line pops up, add that other library to your library list.

dcl-s mydtaara char(10) dtaara;
dcl-pr qcmd extpgm end-pr;
in mydtaara;
dsply mydtaara;
qcmd();
in mydtaara;
dsply mydtaara;
return;

Here's my joblog:

5 > call bmorris/test
DSPLY qtemp
6 > addlible bmorris
Library BMORRIS added to library list.
End of requests.
DSPLY bmorris

--
Barbara

------------------------------

message: 2
date: Mon, 24 Apr 2017 20:22:22 -0400
from: Douglas Handy <dhandy@xxxxxxxxx>
subject: Providing web services using HTTPS

I am setting up a web service following the methods described by Scott
Klement in his presentation at:

http://www.scottklement.com/presentations/Providing%20RPG%
20Web%20Services%2
0on%20IBM%20i.pdf

I can get everything to work when using http:// but I'd like the traffic
to happen of TLS 1.x instead of plain text. The web service runs on its
own port, not 80 or 443. This works:

http://myserver.com:xxxx/yada/yada/yada

This does not work:

https://myserver.com:xxxx/yada/yada/yada

Nothing in the server instance httpd.conf seems to be related, other than
the listen port of xxxx.

I also can't find discussion of this in the XMLHttpRequest docs at:

https://xhr.spec.whatwg.org/

I can control both the client and server side, so one option would be for
me to do my own encrypt / decrypt (and EBDIC conversion) and pass binary
data instead of trying to piggy back off https support.

But is there a way to have the web service traffic just take advantage of
the HTTPS support?

------------------------------

message: 3
date: Tue, 25 Apr 2017 07:10:39 -0500
from: Bradley Stone <bvstone@xxxxxxxxx>
subject: Re: Providing web services using HTTPS

By default http:// uses port 80. Also https:// uses port 443 by default.

If you're using SSL on a different port, you'll need to specify the port:

https://service.org:4433

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any
Cloud Provider!

On Mon, Apr 24, 2017 at 7:22 PM, Douglas Handy <dhandy@xxxxxxxxx> wrote:

I am setting up a web service following the methods described by Scott
Klement in his presentation at:

http://www.scottklement.com/presentations/Providing%20RPG%
20Web%20Services%20on%20IBM%20i.pdf

I can get everything to work when using http:// but I'd like the
traffic to happen of TLS 1.x instead of plain text. The web service
runs on its own port, not 80 or 443. This works:

http://myserver.com:xxxx/yada/yada/yada

This does not work:

https://myserver.com:xxxx/yada/yada/yada

Nothing in the server instance httpd.conf seems to be related, other
than the listen port of xxxx.

I also can't find discussion of this in the XMLHttpRequest docs at:

https://xhr.spec.whatwg.org/

I can control both the client and server side, so one option would be
for me to do my own encrypt / decrypt (and EBDIC conversion) and pass
binary data instead of trying to piggy back off https support.

But is there a way to have the web service traffic just take advantage
of the HTTPS support?
--
This is the RPG programming on the IBM i (AS/400 and iSeries)
(RPG400-L) mailing list To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

------------------------------

message: 4
date: Tue, 25 Apr 2017 07:29:03 -0500
from: "Kevin Bucknum" <Kevin@xxxxxxxxxxxxxxxxxxx>
subject: RE: Providing web services using HTTPS

You have to config the server side to serve it as HTTPS. It's more than
just changing the URL. In the IBM Web Administrator for i screens, Find the
HTTP server that is serving your web service. You can either select it from
the HTTP Servers tab, or if you go to your server in the Application
Servers tab, there is a link on the left that will take you to your http
server. Click on the Security link on the left hand side once you are in
your http server config page, enable SSL, and fill out all the required
fields. The SSL advanced tab lets your control the TLS versions and ciphers
that you will accept.

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: RPG400-L [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of
Douglas Handy
Sent: Monday, April 24, 2017 7:22 PM
To: RPG programming on the IBM i / System i
Subject: Providing web services using HTTPS

I am setting up a web service following the methods described by Scott
Klement in his presentation at:

http://www.scottklement.com/presentations/Providing%20RPG%20Web%2
0Services%20on%20IBM%20i.pdf

I can get everything to work when using http:// but I'd like the

traffic to

happen of TLS 1.x instead of plain text. The web service runs on its

own port,

not 80 or 443. This works:

http://myserver.com:xxxx/yada/yada/yada

This does not work:

https://myserver.com:xxxx/yada/yada/yada

Nothing in the server instance httpd.conf seems to be related, other

than

the listen port of xxxx.

I also can't find discussion of this in the XMLHttpRequest docs at:

https://xhr.spec.whatwg.org/

I can control both the client and server side, so one option would be

for me

to do my own encrypt / decrypt (and EBDIC conversion) and pass binary

data

instead of trying to piggy back off https support.

But is there a way to have the web service traffic just take advantage

of the

HTTPS support?
--
This is the RPG programming on the IBM i (AS/400 and iSeries)

(RPG400-L)

mailing list To post a message email: RPG400-L@xxxxxxxxxxxx To

subscribe,

unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

------------------------------

message: 5
date: Tue, 25 Apr 2017 10:36:53 -0400
from: Jose Perez <joseenocperez.jp@xxxxxxxxx>
subject: Re: Providing web services using HTTPS

Sql has a lot easier way to access resources on the web, its functions
are powerful enough to access and consume data from many sources. for
example httpGetClob retrieve resources from a given URL using the get
method and httpPutClob Create textual resources in a given URL using the
put method, your don't even need to create REST or SOAP services on the web.

On Tue, Apr 25, 2017 at 8:29 AM, Kevin Bucknum <Kevin@xxxxxxxxxxxxxxxxxxx>
wrote:

You have to config the server side to serve it as HTTPS. It's more
than just changing the URL. In the IBM Web Administrator for i
screens, Find the HTTP server that is serving your web service. You
can either select it from the HTTP Servers tab, or if you go to your
server in the Application Servers tab, there is a link on the left
that will take you to your http server. Click on the Security link on
the left hand side once you are in your http server config page,
enable SSL, and fill out all the required fields. The SSL advanced tab
lets your control the TLS versions and ciphers that you will accept.

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: RPG400-L [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of
Douglas Handy
Sent: Monday, April 24, 2017 7:22 PM
To: RPG programming on the IBM i / System i
Subject: Providing web services using HTTPS

I am setting up a web service following the methods described by
Scott Klement in his presentation at:

http://www.scottklement.com/presentations/Providing%20RPG%20Web%2
0Services%20on%20IBM%20i.pdf

I can get everything to work when using http:// but I'd like the

traffic to

happen of TLS 1.x instead of plain text. The web service runs on
its

own port,

not 80 or 443. This works:

http://myserver.com:xxxx/yada/yada/yada

This does not work:

https://myserver.com:xxxx/yada/yada/yada

Nothing in the server instance httpd.conf seems to be related, other

than

the listen port of xxxx.

I also can't find discussion of this in the XMLHttpRequest docs at:

https://xhr.spec.whatwg.org/

I can control both the client and server side, so one option would
be

for me

to do my own encrypt / decrypt (and EBDIC conversion) and pass
binary

data

instead of trying to piggy back off https support.

But is there a way to have the web service traffic just take
advantage

of the

HTTPS support?
--
This is the RPG programming on the IBM i (AS/400 and iSeries)

(RPG400-L)

mailing list To post a message email: RPG400-L@xxxxxxxxxxxx To

subscribe,

unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: http://amzn.to/2dEadiD

--
This is the RPG programming on the IBM i (AS/400 and iSeries)
(RPG400-L) mailing list To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

------------------------------

message: 6
date: Tue, 25 Apr 2017 10:15:35 -0500
from: "Kevin Bucknum" <Kevin@xxxxxxxxxxxxxxxxxxx>
subject: RE: Providing web services using HTTPS

I'm not sure that I understand, how does the http clob functions allow you
to provide a web service. I haven't actually used them yet, but they look
to be clients to me, not servers.

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: RPG400-L [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of

Jose

Perez
Sent: Tuesday, April 25, 2017 9:37 AM
To: RPG programming on the IBM i (AS/400 and iSeries)
Subject: Re: Providing web services using HTTPS

Sql has a lot easier way to access resources on the web, its

functions are

powerful enough to access and consume data from many sources. for
example httpGetClob retrieve resources from a given URL using the get
method and httpPutClob Create textual resources in a given URL using

the

put method, your don't even need to create REST or SOAP services on

the

web.

On Tue, Apr 25, 2017 at 8:29 AM, Kevin Bucknum
<Kevin@xxxxxxxxxxxxxxxxxxx>
wrote:

You have to config the server side to serve it as HTTPS. It's more
than just changing the URL. In the IBM Web Administrator for i
screens, Find the HTTP server that is serving your web service. You
can either select it from the HTTP Servers tab, or if you go to your
server in the Application Servers tab, there is a link on the left
that will take you to your http server. Click on the Security link

on

the left hand side once you are in your http server config page,
enable SSL, and fill out all the required fields. The SSL advanced

tab

lets your control the TLS versions and ciphers that you will accept.

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: RPG400-L [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of
Douglas Handy
Sent: Monday, April 24, 2017 7:22 PM
To: RPG programming on the IBM i / System i
Subject: Providing web services using HTTPS

I am setting up a web service following the methods described by
Scott Klement in his presentation at:

http://www.scottklement.com/presentations/Providing%20RPG%20Web%2

0Services%20on%20IBM%20i.pdf

I can get everything to work when using http:// but I'd like the

traffic to

happen of TLS 1.x instead of plain text. The web service runs on
its

own port,

not 80 or 443. This works:

http://myserver.com:xxxx/yada/yada/yada

This does not work:

https://myserver.com:xxxx/yada/yada/yada

Nothing in the server instance httpd.conf seems to be related,

other

than

the listen port of xxxx.

I also can't find discussion of this in the XMLHttpRequest docs

at:

https://xhr.spec.whatwg.org/

I can control both the client and server side, so one option would
be

for me

to do my own encrypt / decrypt (and EBDIC conversion) and pass
binary

data

instead of trying to piggy back off https support.

But is there a way to have the web service traffic just take
advantage

of the

HTTPS support?
--
This is the RPG programming on the IBM i (AS/400 and iSeries)

(RPG400-L)

mailing list To post a message email: RPG400-L@xxxxxxxxxxxx To

subscribe,

unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx Before posting, please

take

a moment to review the archives at
http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: http://amzn.to/2dEadiD

--
This is the RPG programming on the IBM i (AS/400 and iSeries)
(RPG400-L) mailing list To post a message email:

RPG400-L@xxxxxxxxxxxx

To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx Before posting, please take

a

moment to review the archives at

http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: http://amzn.to/2dEadiD

--
This is the RPG programming on the IBM i (AS/400 and iSeries)

(RPG400-L)

mailing list To post a message email: RPG400-L@xxxxxxxxxxxx To

subscribe,

unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

------------------------------

Subject: Digest Footer

--
This is the RPG programming on the IBM i (AS/400 and iSeries) (RPG400-L)
digest list To post a message email: RPG400-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link:
http://amzn.to/2dEadiD

------------------------------

End of RPG400-L Digest, Vol 16, Issue 164
*****************************************

--
This is the RPG programming on the IBM i (AS/400 and iSeries) (RPG400-L)
mailing list To post a message email: RPG400-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD
--
This is the RPG programming on the IBM i (AS/400 and iSeries) (RPG400-L)
mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD