Tracing SSL trafic for FTP session



Ask about System customization & performance, Workload management, I/O device configuration etc.

Tracing SSL trafic for FTP session

Postby danik56 » Fri Mar 11, 2022 10:48 pm

I have the following JCL where I tried to generate GSK trace to see the SSL handshaking flow (when FTP setup to use AT-TLS):


//S1 EXEC PGM=BPXBATCH,REGION=8M,

// PARM='sh ftp -d kalda01.ddns.net 2821 -f /u/smpe/z2ftp2.data'

//*

//STEPLIB DD DSN=CEE.SCEERUN,DISP=SHR

//STDERR DD PATH='/u/smpe/mystd1.err',

// PATHOPTS=(OWRONLY,OCREAT,OTRUNC),PATHMODE=SIRWXU

//STDOUT DD PATH='/u/smpe/mystd1.out',

// PATHOPTS=(OWRONLY,OCREAT,OTRUNC),PATHMODE=SIRWXU

//STDIN DD PATH='/u/smpe/ftp.sh',PATHOPTS=(ORDONLY)

//*

//STDENV DD *

GSK_TRACE=0xFFFF

GSK_TRACE_FILE=/u/smpe/gskfile.trc

GSK_PROTOCOL_TLSV1_2=ON

//


I am not getting any trace output in "/u/smpe/gskfile.trc "

can you tell me what I need to do in order to produce the SSL trace ?
danik56
 
Posts: 22
Joined: Tue May 23, 2017 2:19 am
Has thanked: 0 time
Been thanked: 0 time

Re: Tracing SSL trafic for FTP session

Postby sergeyken » Fri Mar 11, 2022 11:04 pm

Please, use the Code button for ALL your code, and data samples.
Javas and Pythons come and go, but JCL and SORT stay forever.
User avatar
sergeyken
 
Posts: 436
Joined: Wed Jul 24, 2019 10:12 pm
Has thanked: 7 times
Been thanked: 40 times

Re: Tracing SSL trafic for FTP session

Postby arun3169 » Sun Mar 20, 2022 12:36 am

Hi Danik56

Follow this instruction.

https://www.ibm.com/support/pages/how-capture-and-format-ssl-component-trace



Thanks
Arun Prasad
arun3169
 
Posts: 1
Joined: Fri Dec 16, 2011 5:45 pm
Has thanked: 0 time
Been thanked: 0 time

Re: Tracing SSL trafic for FTP session

Postby danik56 » Sun Mar 20, 2022 11:59 am

I already tried this process and the trace output dataset is empty.
Maybe FTP client is not using system SSL when AT-TLS policy is used ?
danik56
 
Posts: 22
Joined: Tue May 23, 2017 2:19 am
Has thanked: 0 time
Been thanked: 0 time


Return to System programming