Implementing CA XCOM r12 with IBM's System SSL

Document ID : KB000012317
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

We are needing to support TLS 1.2 with CA XCOM r12 for z/OS and that requires implementing IBM's System SSL. Will implementing IBM's System SSL be compatible with the other CA XCOM platforms that still use OpenSSL v3?

Environment:
XCOM r12.0 for z/OSXCOM r11.x for other platforms that support OpenSSL
Answer:

Implementing IBM's System SSL with CA XCOM r12 for z/OS is compatible with other CA XCOM r11.x platforms that use OpenSSL v3 for its transfers. In other words, IBM's System SSL supports SSLv3 with SSL_METHOD set to ALL for INITIATE_SIDE= and/or RECEIVE_SIDE in the SYSconfigssl.cnf. That is the current default value for the parameter.