Re: PTF MF64534 for ROBOT TLS Vulnerability...

I reported the original issue and applied the test PTF.
It corrected the vulnerability.

Jim W Grant
Senior VP, Chief Information Officer
Web: www.pdpgroupinc.com




From: "Bradley Stone" <bvstone@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Date: 01/29/2018 12:27 PM
Subject: PTF MF64534 for ROBOT TLS Vulnerability...
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Has anyone on V7R3 applied this ptf?

http://www-01.ibm.com/support/docview.wss?uid=nas3MF64534

I have it loaded but it requires IPL and I can't do that in the middle of
the day. I do plan on IPLing tonight to see if it changes the Cipher
list.

I was going to do it manually using SSL config but there's no way the
command would fit on the 2 input ines they give you in SST. I couldn't
find a way to extend the SSLCONFIG command line either.

Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #19 <https://www.bvstools.com/mailtool.html>: The ability
to turn off "Strict SSL" settings. This means no importing Certificate
Authorities (CAs) unless you want to.