The SSL_REQ_CLNT_CERT statement controls whether a PowerExchange server uses an SSL certificate to authenticate the identity of a PowerExchange client.
Linux, UNIX, and Windows and IBM i
SSL, SSL_ALLOW_SELFSIGNED, and SSL_REQ_SRVR_CERT
No
SSL_REQ_CLNT_CERT={N|Y}
N
. The PowerExchange server does not authenticate the identity of the PowerExchange client. On IBM i, N indicates that the GSK session type is SERVER SESSION so the client machine subject certificates are not requested or validated.
Y
. The PowerExchange server authenticates the identity of the PowerExchange client by using an SSL certificate. On IBM i, Y indicates that the GSK session type is SERVER SESSION WITH CLIENT AUTHORITY, which indicates that the X509 subject certificate from the client machine is validated against the trusted Certificate Authorities on the IBM i server.
Default is N for PowerExchange servers running on Linux, UNIX, or Windows.
Default is Y for PowerExchange servers running on z/OS or IBM i.