Hi Scott,
I've installed version 1.26 of HTTPAPI, and ran it through a few tests.
As per your instructions, I called https_init() and told it to use TLS versions 1.1 and 1.2 (we've been told we will have to shut off TLS 1.0 soon):
https_init(APP_ID: *OFF: *OFF: *OFF: *ON: *ON);
I did notice that the constant HTTP_USERAGENT in CONFIG_H is still set to 'http-api/1.24', but that didn't appear to have an effect on my test.
It works beautifully. Here is a snippet of my debug file:
HTTPAPI Ver 1.26 released 2014-12-19
OS/400 Ver V7R1M0
New iconv() objects set, PostRem=819. PostLoc=0. ProtRem=819. ProtLoc=0
https_init(): entered
QSSLPCL = *TLSV1.2 *TLSV1.1 *TLSV1
SSL version 2 support disabled
SSL version 3 support disabled
Old interface to TLS version 1.0 support disabled
TLS version 1.0 support disabled
TLS version 1.1 support enabled
TLS version 1.2 support enabled
Thank you so much for your help and support. Merry Christmas!
Kim Mitchell
------------------------------
Message: 2
Date: Mon, 22 Dec 2014 15:04:06 +0000
From: Kim Mitchell <kmitchell@xxxxxxxxxxxxxxxxxx>
To: "ftpapi@xxxxxxxxxxxxxxxxxxxxxx" <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: HTTPAPI Version 1.26 Released!
Message-ID:
<06AD26F8200E9B4F9D460E6F21A5B4759D4784A5@xxxxxxxxxxxxxxxxxxx>
Content-Type: text/plain; charset="us-ascii"
Wow, that was fast! Scott, thank you so much - I'll get this into testing today and will let you know the results.
You just made my Monday! :)
Kim
On Fri, Dec 19, 2014 at 2:10 AM, Scott Klement <sk@xxxxxxxxxxxxxxxx> wrote:
Everyone,
It's been much too long since I've released a version of HTTPAPI -- so
I decided to go ahead and release one :-)
Version 1.26 contains these updates (over 1.24):
-- Several bug fixes.
-- Disabled Nagle's Algorithm to improve performance
-- When possible, send entire request in a single block to improve
performance
-- Disable support for SSL versions 2 and 3 unless you explicitly
enable them with https_init, due to the fact that these protocols are
no longer secure.
-- Enable support for TLS versions 1.1 and 1.2 if your operating
system supports them.
-- Enable support for Server Name Indication (SNI) in SSL/TLS if your
operating system supports it.
Please report any suggestions/problems to this mailing list.
Thanks!
CONFIDENTIALITY NOTICE: This transmission is intended only for the use of the individual(s) named as recipients. It may contain information that is privileged, confidential and/or protected from disclosure under applicable law. If you are not the intended recipient of this transmission, please notify the sender immediately by telephone. Do not deliver, distribute or copy this transmission, disclose its contents, or take any action in reliance on the information it contains
-----------------------------------------------------------------------
This is the FTPAPI mailing list. To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------