Re: PGP encryption. -- MIDRANGE-L

We use PGP to send files to Wells Fargo. PGP is public/private key
encryption.
Generally Wells Fargo gives you a public key, you encrypt the file using
that. Once the file gets to Wells Fargo they decrypt it using the private
key.

We use BouncyCastle (open source) Java api to encrypt and decrypt. This is
encapsulated using a cl command so it can be called for CL. I got the
source from searching in google, but had to tweak the java classes a little
to make it work properly.

This is not like an SSL. SSL or SFTP is more at the protocol layer where as
when using PGP you have to encrypt first and then ftp or SFTP the file
over.

On Sat, Jul 21, 2012 at 12:54 AM, Roger Harman <roger_harman@xxxxxxxxxxx>wrote:

For PGP transfers with a couple of trading partners, I used IpSwitch WS_FTP
Pro on a PC in the data center. Mapped a drive to a share on the "i" and
was good to go. Tried to keep it all on the "i" but couldn't get the open
source stuff working right in the timeframe I had. Definitely had no
budget
for Townsend or something similar.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Friday, July 20, 2012 12:50 PM
To: Midrange Systems Technical Discussion
Subject: Re: PGP encryption.

Because Wells Fargo and Visa say so. It has been determined that is all I
need to know.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

From: John McKee <jmmckee@xxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
Date: 07/20/2012 03:47 PM
Subject: Re: PGP encryption.
Sent by: midrange-l-bounces@xxxxxxxxxxxx

I know I am missing something. Why is PGP encryption needed? Using
sftp is already encrypted.

I can understand using PGP or GnuPGP if plain FTP is used.

Thanks,

John McKee

On Fri, Jul 20, 2012 at 2:35 PM, Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

9K....Yowsers!

Even more reason to use GnuPGP...

It's compatible with PGP...

On Fri, Jul 20, 2012 at 3:21 PM, Vernon Hamberg
<vhamberg@xxxxxxxxxxxxxxx> wrote:

I've heard yesterday that Symantec now owns PGP and charges for it - an
enterprise license is like $9000 - my son is working for a union here
that has a partner who wants them to use PGP, then SFTP.

So I checked with our security guru, and he says, yes, you need to pay

now.

I don't know how Linoma deals with this - whether they have some kind

of

deal with Symantec.

Our guy said that each customer is assigned a shared key by Symantec.
This has to be given to anyone who needs to decrypt the data. You'd

need

to get that shared key from whomever is sending you stuff, I believe.

That's all I know - and I also won't say how I feel about Symantec!!

HTH
Vern

On 7/20/2012 1:15 PM, Charles Wilt wrote:

Check your Linoma software...they might already have it...

Otherwise

http://www.iprodeveloper.com/article/application-development/using-gnupg-for
-pgp-on-i-64370

http://www.scottklement.com/gnupg/

As far as key, they can be either or...as the receiver I'd expect the
partner to be using your public key that you'd need to provide
directly or publish.

HTH,
Charles

On Fri, Jul 20, 2012 at 1:53 PM, <rob@xxxxxxxxx> wrote:

We have a trading partner who wants to encrypt a file using PGP
encryption. Then he will send it to us via our SFTP site (set up

using

Linoma software). Once the transmission is complete we have to

decrypt

it. There's two questions that first pop to mind:
1 - Are PGP keys like SSL keys where you get them from a trusted

source

for a fee or are they something that you get from some open source

type

site for nothing?
2 - How does one decrypt a file on the i that is PGP encrypted?

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.