RE: v5r4 SHA-256 certificates and TLS 1.0 for HTTPS

["Ian Patterson" <ian@xxxxxxxxxxxxxxxxx>]

Charles, I don't think so.
Its easy to mix up SHA2 used in communications and SHA2 used in digital signatures.
I think the PTF you are referring to is support for SHA2 algorithms in the digital certificates.

SHA2 used in communications encryption is entirely different. I did a lot of work a year or so ago with V5R4 trying to support TLS1.1 and 1.2 and it doesn't.
 
Regards
 
Ian Patterson



-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Charles Wilt
Sent: 19 February 2016 15:48
To: HTTPAPI and FTPAPI Projects
Subject: Re: v5r4 SHA-256 certificates and TLS 1.0 for HTTPS

Updating an old thread based upon some info I found...

It appears IBM may have added SHA2 support to v5r4.
http://www-912.ibm.com/a_dir/as4ptf.nsf/ALLPTFS/MF52000

Charles


On Thu, Mar 12, 2015 at 11:42 AM, Ian Patterson <ian@xxxxxxxxxxxxxxxxx>
wrote:

> Charles.
>
> V5R4 supports TLS 1.0
>
> However my understanding is that SHA256 (any SHA2) is not supported 
> under TLS 1.0, only 1.1 and 1.2
>
> TLS 1.1 and above will not be offered to V5R4. Indeed its only 
> available
> 7.1 and above.
>
> You may find this useful:
> http://ibmsystemsmag.com/Blogs/i-can/Archive/new-system-ssl-support/
>
>
> Regards
>
> Ian Patterson
>
> Grange IT Limited
>
>
> -----Original Message-----
> From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:
> ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Charles Wilt
> Sent: 12 March 2015 12:39
> To: HTTPAPI and FTPAPI Projects
> Subject: v5r4 SHA-256 certificates and TLS 1.0 for HTTPS
>
> (posting for a former co-worker)
>
> When using HTTP API, can v5r4 decode a SHA-265 certificates from the 
> web server?
>
> Also, TLS 1.0 is supported at v5r4 right?  It's just TLS 1.1 and 1.2 
> that is not.
>
> So if the web server is disabling just SSL 3.0, HTTPAPI should still 
> work with TLS 1.0?
>
> Thanks!
> Charles
>
> --
> I am using the free version of SPAMfighter.
> SPAMfighter has removed 512 of my spam emails to date.
> Get the free SPAMfighter here: http://www.spamfighter.com/len
>
> Do you have a slow PC? Try a Free scan 
> http://www.spamfighter.com/SLOW-PCfighter?cid=sigen
>
> ----------------------------------------------------------------------
> - This is the FTPAPI mailing list.  To unsubscribe, please go to:
> http://www.scottklement.com/mailman/listinfo/ftpapi
> ----------------------------------------------------------------------
> -
>

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------