System i: Programming Secure Sockets APIs - IBM
System i: Programming Secure Sockets APIs - IBM
System i: Programming Secure Sockets APIs - IBM
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
char *keyringFileName (input)<br />
A pointer to a null-terminated character string, identifying the path to the key database file to be<br />
used for this job’s SSL processing. The path must be a fully qualified integrated file system file<br />
name.<br />
This parameter is assumed to be represented in the CCSID (coded character set identifier)<br />
currently in effect for the job. If the CCSID of the job is 65535, this parameter is assumed to be<br />
represented in the default CCSID of the job.<br />
See “QlgSSL_Init()—Initialize the Current Job for SSL (using NLS-enabled path name)” on page<br />
65 for a description of supplying the keyringFileName in any CCSID.<br />
char *keyringPassword (input)<br />
A pointer to a null-terminated character string, identifying the password for the key database file<br />
named in the keyringFileName field.<br />
If this parameter’s value is equal to NULL, then the SSL_Init() support will attempt to extract the<br />
key database password that has been securely stored on the system.<br />
This parameter is assumed to be represented in the CCSID (coded character set identifier)<br />
currently in effect for the job. If the CCSID of the job is 65535, this parameter is assumed to be<br />
represented in the default CCSID of the job.<br />
unsigned short int* cipherSuiteList (input)<br />
A pointer to the cipher specification list to be used during the SSL handshake protocol for this<br />
job. This list is a string of concatenated cipher specification values. A cipher specification value is<br />
an unsigned short integer. Any value provided will override any values provided by a previous<br />
SSL_Init() API or SSL_Init_Application() API or the system default cipher specification list if the<br />
previous SSL_Init() API or SSL_Init_Application() API did not provide a cipher specification list. A<br />
value of NULL for this parameter indicates one of the following:<br />
v Use the cipher specification list provided by a previous SSL_Init() API or SSL_Init_Application()<br />
API<br />
v Use the system default cipher specification list if a previous SSL_Init() API or<br />
SSL_Init_Application() API was not done<br />
The caller specifies the preferred order of the cipher specifications. The cipher specification<br />
values, shown here not in preferred or strength order, are defined in as the following:<br />
Notes:<br />
C Constant Hex <strong>System</strong> Value<br />
TLS_RSA_WITH_NULL_MD5 0x0001 *RSA_NULL_MD5<br />
TLS_RSA_WITH_NULL_SHA 0x0002 *RSA_NULL_SHA<br />
TLS_RSA_EXPORT_WITH_RC4_40_MD5 0x0003 *RSA_EXPORT_RC4_40_MD5<br />
TLS_RSA_WITH_RC4_128_MD5 0x0004 *RSA_RC4_128_MD5<br />
TLS_RSA_WITH_RC4_128_SHA 0x0005 *RSA_RC4_128_SHA<br />
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 0x0006 *RSA_EXPORT_RC2_CBC_40_MD5<br />
TLS_RSA_WITH_DES_CBC_SHA 0x0009 *RSA_DES_CBC_SHA<br />
TLS_RSA_WITH_3DES_EDE_CBC_SHA 0x000A *RSA_3DES_EDE_CBC_SHA<br />
TLS_RSA_WITH_AES_128_CBC_SHA 0x002F *RSA_AES_128_CBC_SHA (TLS Version 1 only)<br />
TLS_RSA_WITH_AES_256_CBC_SHA 0x0035 *RSA_AES_256_CBC_SHA (TLS Version 1 only)<br />
TLS_RSA_WITH_RC2_CBC_128_MD5 0xFF01 *RSA_RC2_CBC_128_MD5 (SSL Version 2 only)<br />
TLS_RSA_WITH_DES_CBC_MD5 0xFF02 *RSA_DES_CBC_MD5 (SSL Version 2 only)<br />
TLS_RSA_WITH_3DES_EDE_CBC_MD5 0xFF03 *RSA_3DES_EDE_CBC_MD5 (SSL Version 2 only)<br />
1. The SSL_RSA_EXPORT_WITH_DES40_CBC_SHA cipher is not supported by i5/OS ®<br />
.<br />
2.<br />
The default cipher suite list in preference order when the operating system is installed is as<br />
follows:<br />
<strong>Secure</strong> <strong>Sockets</strong> <strong>APIs</strong> 81