CICS Transaction Gateway V5 The WebSphere ... - IBM Redbooks

8.4.2 Tracing
Testing JSSE under z/OS
We found running the following test from z/OS UNIX System Services useful to
quickly verify that the JSSE SSL protocol handler was working correctly. We
performed the following steps:
1. From a z/OS UNIX System Services shell, we changed to the /ctg/scsctg5
directory where our server keystore was.
2. We used the keytool command in Example 8-8 on page 199 to invoke the
Key Management Tool to export the self-signed certificate from the server
keystore in the file jssesslss.jks into a file called server.der.
3. We used the keytool command in Example 8-18 to invoke the Key
Management Tool to import the self-signed certificate from the file server.der
into the keystore jsseclientsslonly.jks, identified by the alias ITSO. Because
this keystore did not exist, keytool created it. The keystore password was set
to default.
Example 8-18 Creating a client keystore with the self-signed certificate
$ [SC66] /ctg/scsctg5: keytool -import -alias ITSO -file server.der
-keystore jsseclientsslonly.jks -storepass default
Certificate was added to keystore
This added our self-signed server certificate into the keystore as a trusted CA.
4. We used the commands in Example 8-19 to set the CLASSPATH and run
EciB1 against the JSSE SSL protocol handler.
Example 8-19 Commands to test JSSE SSL using the SSL-only keystore
export CLASSPATH=/usr/lpp/ctg500/ctg/classes/ctgclient.jar
export CLASSPATH=$CLASSPATH:/usr/lpp/ctg500/ctg/classes/ctgsamples.jar
java com.ibm.ctg.samples.eci.EciB1 ssl://wtsc66oe.itso.ibm.com 8062
/ctg/scsctg5/jsseclientsslonly.jks default
The commands ran the compiled version of EciB1 inside ctgsamples.jar and
connected to the CICS TG on our z/OS system using the SSL support provided
by the JSSE library on both client and CICS TG. We entered 1 at the prompt to
select our CICS server. The results of our test was identical to that shown in
Example 8-16 on page 206, except the time and date on our CICS server was
different.
For information on tracing the CICS TG on z/OS, refer to the tracing section of
Chapter 7, “TCP connections to the Gateway daemon on z/OS” on page 133.
Chapter 8. SSL connections to the Gateway daemon on z/OS 211