Encrypt TCP messages

50 pts.
Tags:
AS400 iseries
Encryption
IBM
Socket
TCP
What is the best way to encrypt proprietary (non-XML) messages over a TCP socket from the iSeries? I am currently using IBM's QZRDSSRV API's to do the sends and receives and create the socket connections, but those API's don't support encryption.

Software/Hardware used:
iSeries QZRDSSRV API's

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • saturno
    Hi, If the API doesn't support it, I think the next step is considering SSL or TLS, and encapsulate the communication with that. I can point you to the Transport Layer Security, which might be a good starting point.
    4,585 pointsBadges:
    report
  • TomLiotta
    Going from the QZRDSSRV set to "real" sockets is easier than jumping in cold, but it will still take some learning. Unless you're already comfortable as a sockets programmer, you might want to use QZRDSSRV to create either a test client or test server for your new server or client, depending on which way you're going. You'll want to have a basic working function before switching to encryption/decryption. When you can make it work without encryption/decryption, you'll look at the UNIX-Type APIs and the 'Secure Sockets APIs' topic. Within that topic, go into 'i5/OS Global Secure Toolkit (GSKit) APIs'. A secondary route goes in through Secure sockets. That will take you into 'Global Secure ToolKit (GSKit) APIs' and you can make decisions from there. The first link is the more direct navigation to the GSKit APIs. The second link is more for C programmers; it tells more about how the APIs can be used. (It also has links to the APIs, but navigation isn't as straightforward.) When did you obtain QZRDSSRV? I.e., how long have you used it? (I haven't seen it in almost ten years, so I'm not certain what might have been updated in it. I wasn't sure if it was even available any more.) Tom
    125,585 pointsBadges:
    report
  • Denny Cherry
    I don't know the iSeries specifically, but if this was a Windows box or a normal Linux box I'd recommend using IPSec to encrypt the data.
    66,295 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following