• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 606
  • Last Modified:

SSL in a z/OS TCP/IP server program.

I have a TCP/IP server application running in a z/OS region, processing HTTP requests. Everything works fine except now I want to add extre security to it by adding SSL support. Can this be done without using USS? Can SSL support be accomplished in a z/OS region? I am currently using the EZASMI API macros.
1 Solution
Is your program actually handling the http traffic or do you have something else, like IBM's HTTP server, CICS, or WebSphere?

If you are actually handling the http traffic, you can do SSL.  However I am 99% SSL requires Unix System Services.

However, since you have an IP based application you might be able to use AT-TLS, Application Transparent Transport Layer Security.  This will allow you to use TLS without your application having to know anything about it.
adlerflugAuthor Commented:
Yes, I am handling the http traffic. I was 90% sure that SSL required USS but was hoping there was another way of doing it. Oh well.
But AT-TLS sounds very interesting and perhaps exactly what I was looking for.
Thank you very much for your response, it helped me a lot.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now