Re: What TLS are clients using?

Yes, in the latest updates for IBM i Services, there is now the AUDIT_JOURNAL_SK table function for the *NETSECURE audit entries.

https://www.ibm.com/docs/en/i/7.5?topic=services-audit-journal-sk-table-function <https://www.ibm.com/docs/en/i/7.5?topic=services-audit-journal-sk-table-function>

It’s also available for 7.4.

Dawn

On Nov 26, 2022, at 3:55 AM, stefan@xxxxxxxxxx wrote:

Is there a good way to check what TLS levels clients are using (ref QSSLPCL)? The best I can come up with is to disable a level and see what breaks, but I prefer to avoid doing things that way.

Hi Justin,
The fastest way I've found is to:
1. Make sure you have auditing up and running
2. Add keyword *NETSECURE to the systemvalue QAUDLVL or QAUDLVL2.
3. Periodically run cpyaudjrne enttyp(SK) and you will find the information you need.

Eventually there's an db2 service for reading the auditdata, I'm not connected right now.

Best regards

Stefan

--
No trees were killed in the sending of this message, but a large number of electrons were terribly upset.

Stefan Tageson
+46 732 369934
stefan@xxxxxxxxxx


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com