John,
Did you catch this also?
<snip>
Basically what the issue with porting newer ciphers down to 7.1 is hinged
on is a core part of 7.2.
<snipped from IBM>
The ability to configure multiple certificates for a secure environment
was added. Multiple Certificate Selection allows a secure environment to
enable Elliptic Curve Digital Signature Algorithm (ECDSA) certificates
while still allowing RSA certificates.
</snipped from IBM>
https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_72/rzain/rzainwhatnew.htm
This is not the only kind of stuff that is dying on 7.1 prior to the end
of support of 7.1.
JDK 6 will reach End of Support for both 7.1 and 7.2 in December of 2017.
...
</snip>
While it sounds like it shouldn't be such a big thing to offer 'just
another cipher' perhaps the engine to do certain ciphers, in combination
with existing ciphers, had to drastically change.
The closest comparison which immediately comes to mind is your virus
scanning software having to come out with a new scan engine to support
newer pattern files. I'm sure there's a million ways to punch holes in
that comparison as most every comparison which gets offered on this list
dies a grisly death.
Rob Berendt
midrange.com
