System i: Programming Secure Sockets APIs - IBM

};
program called when a
certificate is received
during SSL handshake */
The fields within the SSLHandle structure as pointed to by handle are defined as follows:
int fd (input) The socket descriptor of the connection for which the SSL handshake protocol is
to be performed. This field was initialized by a prior SSL_Create() API.
int createFlags (input) Whether or not the SSL protocol is to be used. If the field specifies a value that
does not include the SSL_ENCRYPT flag, then this function will return success
without performing the SSL handshake protocol. This field was initialized by a
prior SSL_Create() API.
unsigned int protocol
(input/output)
The type of SSL handshake protocol to be performed. The protocol(s) that are
acceptable as the handshake protocol for this job. The following values may be
specified for protocol and are defined in .
SSL_VERSION_CURRENT 0 (TLS with SSL Version 3.0 and SSL
Version 2.0 compatibility)
SSL_VERSION_2 2 (SSL Version 2.0 only)
SSL_VERSION_3 3 (SSL Version 3.0 only)
TLS_VERSION_1 4 (TLS Version 1 only)
TLSV1_SSLV3 5 (TLS Version 1 with SSL
Version 3.0 compatibility)
unsigned timeout (input)
Upon return, this field will be set to reflect the protocol version actually
negotiated. If the createFlags field specifies a value that does not include the
SSL_ENCRYPT flag, then this field will be unchanged from its input value.
The approximate number of seconds to wait for the SSL handshake protocol to
complete. A value of 0 indicates to wait forever for the handshake to complete.
unsigned char cipherKind[3] The cipher kind (which is the SSL Version 2.0 cipher suite) negotiated by the
(output)
handshake.
unsigned short int cipherSuite
(output)
The cipher suite type negotiated by the handshake.
unsigned short int*
cipherSuiteList (input)
A pointer to a cipher specification list that is to be used during the handshake
negotiation for this SSL session. This list is a string of concatenated cipher
specification values. Each cipher specification is an unsigned short integer value.
Any value provided will override, for this SSL session, the default cipher
specification list provided by a previous SSL_Init() API or SSL_Init_Application()
API . The valid cipher suites allowed are defined in . A value of
NULL indicates one of the following:
v
Use the cipher specification list provided by a previous SSL_Init(),
QlgSSL_Init() or SSL_Init_Application() API call.
v Use the system default cipher specification list if the previous SSL_Init(),
QlgSSL_Init() or SSL_Init_Application() API call did not provide a cipher
specification list.
The current default cipher suite list can be different from the install time list
due to changes made to the QSSLCSL (SSL cipher specification list) system
value via the Change System Value (CHGSYSVAL) command. A cipher suite
removed from the SSL cipher specification list will also be removed from the
default cipher suite list shown here. The order of the cipher suites in QSSLCSL
will be used to order the cipher suites in the default list.
The Display System Value (DSPSYSVAL) command or the Retrieve System
Values (QWCRSVAL) API can be used to determine the current setting of the
supported ciphers (QSSLCSL) for system SSL.
Secure Sockets APIs 75