To generate a ciphers report on IBM i, enter the following command. For example:
SBMJOB JOB(PWXCIPH) JOBQ(*JOBD) CMD(CALL PGM(PWXLIB/PWXUGSK)
PARM('CMD=REPORT_CIPHERS'))
To generate a ciphers report on z/OS, specify the following JCL parameters. For example:
//STEP1 EXEC PGM=PWXUGSK,REGION=900M,
// PARM='CMD=REPORT_CIPHERS'
The following output is an example of a ciphers report on z/OS:
Reports for command REPORT_CIPHERS
==================================
Terse mode. Excluding weak SSLV2 and SSLV3 ciphers
Calling gsk_get_all_cipher_suites() at address 1EE6FE60
gsk_get_all_cipher_suites() completed OK
Building Cipher List Report
---------------------------
GskGetAllCipherSuites information
---------------------------------
Version=4 release=4 security level=1000 (US)
v3_cipher_suites_expanded='130313021301009DC02CC030C02EC03200A3009F00A500A1003DC024C028C026C02A006A006B006800690035C00AC014C
038003900360037009CC02BC02FC02DC03100A2009E00A400A0003CC023C027C025C02900400067003E003F002FC009C013C004C00E00320033003000310
012C003C00D00130016000D00100005C007C011C002C00C0004000900120015000C000F00030006003B0002C006C010C001C00B00010000'
4 digit ciphers ciphers = 48
Old ciphers discarded ciphers = 39
Selected ciphers ciphers = 48
Total ciphers ciphers = 87
Ciphers by Id
=============
Id Protocol Name
-- -------- ----
003B TLSv1.2 RSA_NULL_SHA256
003C TLSv1.2 AES128-SHA256
003D TLSv1.2 AES256-SHA256
0067 TLSv1.2 DHE-RSA-AES128-SHA256
006B TLSv1.2 DHE-RSA-AES256-SHA256
009C TLSv1.2 AES128-GCM-SHA256
009D TLSv1.2 AES256-GCM-SHA384
009E TLSv1.2 DHE-RSA-AES128-GCM-SHA256
009F TLSv1.2 DHE-RSA-AES256-GCM-SHA384
1301 TLSv1.3 AES_128_GCM_SHA256
1302 TLSv1.3 AES_256_GCM_SHA384
1303 TLSv1.3 CHACHA20_POLY1305_SHA256
C001 TLSv1.2 ECDH_ECDSA_WITH_NULL_SHA
C002 TLSv1.2 ECDH_ECDSA_WITH_RC4_128_SHA
C003 TLSv1.2 ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
C004 TLSv1.2 ECDH_ECDSA_WITH_AES_128_CBC_SHA
C005 TLSv1.2 ECDH_ECDSA_WITH_AES_256_CBC_SHA
C006 TLSv1.2 ECDHE_ECDSA_NULL_SHA
C007 TLSv1.2 ECDHE_ECDSA_RC4_128_SHA
C008 TLSv1.2 ECDHE_ECDSA_3DES_EDE_CBC_SHA
C009 TLSv1.2 ECDHE_ECDSA_WITH_AES_128_CBC_SHA
C00A TLSv1.2 ECDHE_ECDSA_WITH_AES_256_CBC_SHA
C00B TLSv1.2 ECDH_RSA_WITH_NULL_SHA
C00C TLSv1.2 ECDH_RSA_WITH_RC4_128_SHA
C00D TLSv1.2 ECDH_RSA_WITH_3DES_EDE_CBC_SHA
C00E TLSv1.2 ECDH_RSA_WITH_AES_128_CBC_SHA
C00F TLSv1.2 ECDH_RSA_WITH_AES_256_CBC_SHA
C010 TLSv1.2 ECDHE_RSA_NULL_SHA
C011 TLSv1.2 ECDHE_RSA_RC4_128_SHA
C012 TLSv1.2 ECDHE_RSA_3DES_EDE_CBC_SHA
C013 TLSv1.2 ECDHE_RSA_WITH_AES_128_CBC_SHA
C014 TLSv1.2 ECDHE_RSA_WITH_AES_256_CBC_SHA
C023 TLSv1.2 ECDHE-ECDSA-AES128-SHA256
C024 TLSv1.2 ECDHE-ECDSA-AES256-SHA384
C025 TLSv1.2 ECDH_ECDSA_WITH_AES_128_CBC_SHA256
C026 TLSv1.2 ECDH_ECDSA_WITH_AES_256_CBC_SHA384
C027 TLSv1.2 ECDHE-RSA-AES128-SHA256
C028 TLSv1.2 ECDHE-RSA-AES256-SHA384
C029 TLSv1.2 ECDH_RSA_WITH_AES_128_CBC_SHA256
C02A TLSv1.2 ECDH_RSA_WITH_AES_256_CBC_SHA384
C02B TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
C02C TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
C02D TLSv1.2 ECDH_ECDSA_WITH_AES_128_GCM_SHA256
C02E TLSv1.2 ECDH_ECDSA_WITH_AES_256_GCM_SHA384
C02F TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
C030 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
C031 TLSv1.2 ECDH_RSA_WITH_AES_128_GCM_SHA256
C032 TLSv1.2 ECDH_RSA_WITH_AES_256_GCM_SHA384
Ciphers by Name
===============
Id Protocol Name
-- -------- ----
1301 TLSv1.3 AES_128_GCM_SHA256
1302 TLSv1.3 AES_256_GCM_SHA384
009C TLSv1.2 AES128-GCM-SHA256
003C TLSv1.2 AES128-SHA256
009D TLSv1.2 AES256-GCM-SHA384
003D TLSv1.2 AES256-SHA256
1303 TLSv1.3 CHACHA20_POLY1305_SHA256
009E TLSv1.2 DHE-RSA-AES128-GCM-SHA256
0067 TLSv1.2 DHE-RSA-AES128-SHA256
009F TLSv1.2 DHE-RSA-AES256-GCM-SHA384
006B TLSv1.2 DHE-RSA-AES256-SHA256
C004 TLSv1.2 ECDH_ECDSA_WITH_AES_128_CBC_SHA
C025 TLSv1.2 ECDH_ECDSA_WITH_AES_128_CBC_SHA256
C02D TLSv1.2 ECDH_ECDSA_WITH_AES_128_GCM_SHA256
C005 TLSv1.2 ECDH_ECDSA_WITH_AES_256_CBC_SHA
C026 TLSv1.2 ECDH_ECDSA_WITH_AES_256_CBC_SHA384
C02E TLSv1.2 ECDH_ECDSA_WITH_AES_256_GCM_SHA384
C001 TLSv1.2 ECDH_ECDSA_WITH_NULL_SHA
C002 TLSv1.2 ECDH_ECDSA_WITH_RC4_128_SHA
C003 TLSv1.2 ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
C00E TLSv1.2 ECDH_RSA_WITH_AES_128_CBC_SHA
C029 TLSv1.2 ECDH_RSA_WITH_AES_128_CBC_SHA256
C031 TLSv1.2 ECDH_RSA_WITH_AES_128_GCM_SHA256
C00F TLSv1.2 ECDH_RSA_WITH_AES_256_CBC_SHA
C02A TLSv1.2 ECDH_RSA_WITH_AES_256_CBC_SHA384
C032 TLSv1.2 ECDH_RSA_WITH_AES_256_GCM_SHA384
C00B TLSv1.2 ECDH_RSA_WITH_NULL_SHA
C00C TLSv1.2 ECDH_RSA_WITH_RC4_128_SHA
C00D TLSv1.2 ECDH_RSA_WITH_3DES_EDE_CBC_SHA
C02B TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
C023 TLSv1.2 ECDHE-ECDSA-AES128-SHA256
C02C TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
C024 TLSv1.2 ECDHE-ECDSA-AES256-SHA384
C02F TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
C027 TLSv1.2 ECDHE-RSA-AES128-SHA256
C030 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
C028 TLSv1.2 ECDHE-RSA-AES256-SHA384
C006 TLSv1.2 ECDHE_ECDSA_NULL_SHA
C007 TLSv1.2 ECDHE_ECDSA_RC4_128_SHA
C009 TLSv1.2 ECDHE_ECDSA_WITH_AES_128_CBC_SHA
C00A TLSv1.2 ECDHE_ECDSA_WITH_AES_256_CBC_SHA
C008 TLSv1.2 ECDHE_ECDSA_3DES_EDE_CBC_SHA
C010 TLSv1.2 ECDHE_RSA_NULL_SHA
C011 TLSv1.2 ECDHE_RSA_RC4_128_SHA
C013 TLSv1.2 ECDHE_RSA_WITH_AES_128_CBC_SHA
C014 TLSv1.2 ECDHE_RSA_WITH_AES_256_CBC_SHA
C012 TLSv1.2 ECDHE_RSA_3DES_EDE_CBC_SHA
003B TLSv1.2 RSA_NULL_SHA256
Ciphers by Protocol and Id
==========================
Protocol Seq Id Name
-------- --- -- ----
TLSv1.3 1 1301 AES_128_GCM_SHA256
TLSv1.3 2 1302 AES_256_GCM_SHA384
TLSv1.3 3 1303 CHACHA20_POLY1305_SHA256
TLSv1.2 1 003B RSA_NULL_SHA256
TLSv1.2 2 003C AES128-SHA256
TLSv1.2 3 003D AES256-SHA256
TLSv1.2 4 0067 DHE-RSA-AES128-SHA256
TLSv1.2 5 006B DHE-RSA-AES256-SHA256
TLSv1.2 6 009C AES128-GCM-SHA256
TLSv1.2 7 009D AES256-GCM-SHA384
TLSv1.2 8 009E DHE-RSA-AES128-GCM-SHA256
TLSv1.2 9 009F DHE-RSA-AES256-GCM-SHA384
TLSv1.2 10 C001 ECDH_ECDSA_WITH_NULL_SHA
TLSv1.2 11 C002 ECDH_ECDSA_WITH_RC4_128_SHA
TLSv1.2 12 C003 ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
TLSv1.2 13 C004 ECDH_ECDSA_WITH_AES_128_CBC_SHA
TLSv1.2 14 C005 ECDH_ECDSA_WITH_AES_256_CBC_SHA
TLSv1.2 15 C006 ECDHE_ECDSA_NULL_SHA
TLSv1.2 16 C007 ECDHE_ECDSA_RC4_128_SHA
TLSv1.2 17 C008 ECDHE_ECDSA_3DES_EDE_CBC_SHA
TLSv1.2 18 C009 ECDHE_ECDSA_WITH_AES_128_CBC_SHA
TLSv1.2 19 C00A ECDHE_ECDSA_WITH_AES_256_CBC_SHA
TLSv1.2 20 C00B ECDH_RSA_WITH_NULL_SHA
TLSv1.2 21 C00C ECDH_RSA_WITH_RC4_128_SHA
TLSv1.2 22 C00D ECDH_RSA_WITH_3DES_EDE_CBC_SHA
TLSv1.2 23 C00E ECDH_RSA_WITH_AES_128_CBC_SHA
TLSv1.2 24 C00F ECDH_RSA_WITH_AES_256_CBC_SHA
TLSv1.2 25 C010 ECDHE_RSA_NULL_SHA
TLSv1.2 26 C011 ECDHE_RSA_RC4_128_SHA
TLSv1.2 27 C012 ECDHE_RSA_3DES_EDE_CBC_SHA
TLSv1.2 28 C013 ECDHE_RSA_WITH_AES_128_CBC_SHA
TLSv1.2 29 C014 ECDHE_RSA_WITH_AES_256_CBC_SHA
TLSv1.2 30 C023 ECDHE-ECDSA-AES128-SHA256
TLSv1.2 31 C024 ECDHE-ECDSA-AES256-SHA384
TLSv1.2 32 C025 ECDH_ECDSA_WITH_AES_128_CBC_SHA256
TLSv1.2 33 C026 ECDH_ECDSA_WITH_AES_256_CBC_SHA384
TLSv1.2 34 C027 ECDHE-RSA-AES128-SHA256
TLSv1.2 35 C028 ECDHE-RSA-AES256-SHA384
TLSv1.2 36 C029 ECDH_RSA_WITH_AES_128_CBC_SHA256
TLSv1.2 37 C02A ECDH_RSA_WITH_AES_256_CBC_SHA384
TLSv1.2 38 C02B ECDHE-ECDSA-AES128-GCM-SHA256
TLSv1.2 39 C02C ECDHE-ECDSA-AES256-GCM-SHA384
TLSv1.2 40 C02D ECDH_ECDSA_WITH_AES_128_GCM_SHA256
TLSv1.2 41 C02E ECDH_ECDSA_WITH_AES_256_GCM_SHA384
TLSv1.2 42 C02F ECDHE-RSA-AES128-GCM-SHA256
TLSv1.2 43 C030 ECDHE-RSA-AES256-GCM-SHA384
TLSv1.2 44 C031 ECDH_RSA_WITH_AES_128_GCM_SHA256
TLSv1.2 45 C032 ECDH_RSA_WITH_AES_256_GCM_SHA384
Ciphers by Protocol and Server Selection Sequence
=================================================
Protocol Seq Id Name
-------- --- -- ----
TLSv1.3 1 1303 CHACHA20_POLY1305_SHA256
TLSv1.3 2 1302 AES_256_GCM_SHA384
TLSv1.3 3 1301 AES_128_GCM_SHA256
TLSv1.2 1 009D AES256-GCM-SHA384
TLSv1.2 2 C02C ECDHE-ECDSA-AES256-GCM-SHA384
TLSv1.2 3 C030 ECDHE-RSA-AES256-GCM-SHA384
TLSv1.2 4 C02E ECDH_ECDSA_WITH_AES_256_GCM_SHA384
TLSv1.2 5 C032 ECDH_RSA_WITH_AES_256_GCM_SHA384
TLSv1.2 6 009F DHE-RSA-AES256-GCM-SHA384
TLSv1.2 7 003D AES256-SHA256
TLSv1.2 8 C024 ECDHE-ECDSA-AES256-SHA384
TLSv1.2 9 C028 ECDHE-RSA-AES256-SHA384
TLSv1.2 10 C026 ECDH_ECDSA_WITH_AES_256_CBC_SHA384
TLSv1.2 11 C02A ECDH_RSA_WITH_AES_256_CBC_SHA384
TLSv1.2 12 006B DHE-RSA-AES256-SHA256
TLSv1.2 13 C00A ECDHE_ECDSA_WITH_AES_256_CBC_SHA
TLSv1.2 14 C014 ECDHE_RSA_WITH_AES_256_CBC_SHA
TLSv1.2 15 C005 ECDH_ECDSA_WITH_AES_256_CBC_SHA
TLSv1.2 16 C00F ECDH_RSA_WITH_AES_256_CBC_SHA
TLSv1.2 17 009C AES128-GCM-SHA256
TLSv1.2 18 C02B ECDHE-ECDSA-AES128-GCM-SHA256
TLSv1.2 19 C02F ECDHE-RSA-AES128-GCM-SHA256
TLSv1.2 20 C02D ECDH_ECDSA_WITH_AES_128_GCM_SHA256
TLSv1.2 21 C031 ECDH_RSA_WITH_AES_128_GCM_SHA256
TLSv1.2 22 009E DHE-RSA-AES128-GCM-SHA256
TLSv1.2 23 003C AES128-SHA256
TLSv1.2 24 C023 ECDHE-ECDSA-AES128-SHA256
TLSv1.2 25 C027 ECDHE-RSA-AES128-SHA256
TLSv1.2 26 C025 ECDH_ECDSA_WITH_AES_128_CBC_SHA256
TLSv1.2 27 C029 ECDH_RSA_WITH_AES_128_CBC_SHA256
TLSv1.2 28 0067 DHE-RSA-AES128-SHA256
TLSv1.2 29 C009 ECDHE_ECDSA_WITH_AES_128_CBC_SHA
TLSv1.2 30 C013 ECDHE_RSA_WITH_AES_128_CBC_SHA
TLSv1.2 31 C004 ECDH_ECDSA_WITH_AES_128_CBC_SHA
TLSv1.2 32 C00E ECDH_RSA_WITH_AES_128_CBC_SHA
TLSv1.2 33 C008 ECDHE_ECDSA_3DES_EDE_CBC_SHA
TLSv1.2 34 C012 ECDHE_RSA_3DES_EDE_CBC_SHA
TLSv1.2 35 C003 ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
TLSv1.2 36 C00D ECDH_RSA_WITH_3DES_EDE_CBC_SHA
TLSv1.2 37 C007 ECDHE_ECDSA_RC4_128_SHA
TLSv1.2 38 C011 ECDHE_RSA_RC4_128_SHA
TLSv1.2 39 C002 ECDH_ECDSA_WITH_RC4_128_SHA
TLSv1.2 40 C00C ECDH_RSA_WITH_RC4_128_SHA
TLSv1.2 41 003B RSA_NULL_SHA256
TLSv1.2 42 C006 ECDHE_ECDSA_NULL_SHA
TLSv1.2 43 C010 ECDHE_RSA_NULL_SHA
TLSv1.2 44 C001 ECDH_ECDSA_WITH_NULL_SHA
TLSv1.2 45 C00B ECDH_RSA_WITH_NULL_SHA
For PowerExchange Listeners on z/OS machines, the report returns all available ciphers, but AT-TLS rules might limit a user to a subset of the available ciphers. On IBM i, a smaller report is generated because the operating system supports fewer ciphers.
