Re: Domino on the IBM i

[Brad Stone <bvstone@xxxxxxxxx>]

On Tue, Nov 9, 2021 at 8:45 AM Rob Berendt <rob@xxxxxxxxx> wrote:

> Brad,
> Judging by some of your past posts on frustration with IBM i 7.1 not
> having any currently supported ciphers I suspect the customers you have
> still running 7.1 fall into the "Unless you find some (and there are) that
> don't use SSL/TLS or you use some sort of proxy in house." category.
Actually I'd say half of them do that.  The other half set up an exchange
server as a proxy between their IBM i and O365.  *shrug*.  More links in
the chain never hurts, right? haha.

And it's not only V7R1 now.  It seems endpoints using newer SSL certs are
causing problems.  IBM claims it's them not following the RFC (which we
know IBM does almost to a fault).  It will start creeping into other
applications soon enough...  Seems to be related to endpoints seeing
ciphers in the cipher list they don't like and just killing the
handshake/connection instead of ignoring the cipher and moving on.