Re: AT/TLS (to be or not to be ... that is the question)

If you leave TN3270 and FTP out of the picture AT/TLS works very well
under V1R8. I have tried TN3270 using AT/TLS and it worked OK, but not
willing to try production until we get to V1R9.

Tom Zimmerman
515-235-9773

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@xxxxxxxxxxx] On
Behalf Of Patrick O'Keefe
Sent: Thursday, May 29, 2008 5:10 PM
To: IBM-MAIN@xxxxxxxxxxx
Subject: Re: AT/TLS (to be or not to be ... that is the question)

On Thu, 29 May 2008 17:38:48 -0400, Rob Schramm
<Rob.Schramm@xxxxxxxxxxxxx> wrote:

Has anyone setup AT/TLS under z/OS 1.8? I have heard that
deploying
AT/TLS under z/OS 1.8 is not advisable and shouldn't be done until
you are
at z/OS 1.9. However, I haven't heard the "why"... or some sort of
qualification of the cautionary statement.

We also haven't set it up under 1.8 because of that cautionary
statement, but I've heard a pretty good explanation of that
statement. (Better than I can describe it.)

AT/TLS supposedly works under 1.8, but the 1.8 Tn3270 and FTP
servers are not AT/TLS-aware until 1.9. They can't tell that they are
running under AT/TLS so you cannot cleanly move their TLS support
into AT/TLS. I think I heard that you actually *could* move it into
AT/TLS, but that you'll have to change it again when you get to 1.9
or later.

It sounds like you can implement 1.8 AT/TLS support for other
applications but we haven't tried.


...
I am looking for anyone that has experience with doing it in a
test/production environment.
...

I'd be interested in hearing that, too.

Pat O'Keefe

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html



-----Message Disclaimer-----

This e-mail message is intended only for the use of the individual or
entity to which it is addressed, and may contain information that is
privileged, confidential and exempt from disclosure under applicable law.
If you are not the intended recipient, any dissemination, distribution or
copying of this communication is strictly prohibited. If you have
received this communication in error, please notify us immediately by
reply email to Connect@xxxxxxxxxxxxx and delete or destroy all copies of
the original message and attachments thereto. Email sent to or from the
Principal Financial Group or any of its member companies may be retained
as required by law or regulation.

Nothing in this message is intended to constitute an Electronic signature
for purposes of the Uniform Electronic Transactions Act (UETA) or the
Electronic Signatures in Global and National Commerce Act ("E-Sign")
unless a specific statement to the contrary is included in this message.

While this communication may be used to promote or market a transaction
or an idea that is discussed in the publication, it is intended to provide
general information about the subject matter covered and is provided with
the understanding that The Principal is not rendering legal, accounting,
or tax advice. It is not a marketed opinion and may not be used to avoid
penalties under the Internal Revenue Code. You should consult with
appropriate counsel or other advisors on all matters pertaining to legal,
tax, or accounting obligations and requirements.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

.