Use the PWXUGSK utility to generate reports about SSL libraries and certificates that were generated on z/OS for the PowerExchange Listener. You can also determine the validity of certificates that are available to a specified user.
With the PWXUGSK utility, you can complete the following tasks:
Verify that a specified user ID has the authority to view security certificates for the PowerExchange Listener on z/OS, that the certificates are current and valid, and that the AT-TLS rules can intercept inbound requests, remove the TLS information and send TCP/IP packets to the listener.
Run a certificate report to view certificate information from a RACF keyring or SAF database.
Run a cipher report to view the cipher suites that are available on the z/OS system.
Run an error-code report to view all possible system SSL errors. After an SSL failure, particular instances of these errors can be found in the TCP/IP JES message log.