CICS Transaction Gateway V5 The WebSphere ... - IBM Redbooks

8.2 Configuration
188 CICS Transaction Gateway V5
Table 8-3 Definitions checklist: CICS TG for z/OS SSL JDK configuration
Platform JDK install directory
Windows C:\Program Files\IBM\Java13
z/OS /usr/lpp/java/IBM/J1.3
Table 8-4 Definitions checklist: Certificate field information
X.500 distinguished
name field
gskkyman field Example
cn common name wtsc66oe.itso.ibm.com
o organization IBM
ou organization unit ITSO
l city/locality San Jose
s state/province California
c country name US
There are three versions of SSL that you can use with the z/OS CICS TG.
► System SSL
► SSLight
► JSSE
We will discuss these in the following sections.
SystemSSL
System SSL is specific to z/OS and uses the native SSL function provided by the
z/OS Integrated Cryptographic Service Facility (ICSF). It offers the added
advantage of being able to utilize the z/OS Cryptographic Coprocessor feature,
which can substantially reduce the CPU cost of SSL handshakes and SSL data
encryption. It is supported by its own key management tool, which is known as
gskkyman, and can use both externally signed and self-signed certificates.
Certificates created and managed by System SSL are held in a key database
file (.kdb).
SSLight
The CICS TG supports the Java-based SSLight toolkit, which is provided with
CICS TG on all platforms (including z/OS). It is supported by the CICS TG key