Implementing TLS Security in a PowerExchange Network

Back Next

PWXUSSL Utility

Use the PowerExchange PWXUSSL utility on Linux, UNIX, or Windows to generate reports about TLS libraries, certificates, and cipher suites on Linux, UNIX, and Windows. You can also convert a PKCS12DER certificate to PEM format, and issue a PING command to a secure server to verify that the server certificates are valid and that the server can transfer TCP/IP packets to a PowerExchange Listener.

For example, to confirm that one of the cipher suites listed in FIPS 140-2 Compliant Cipher Suites is supported on your machine, generate a report of the cipher suites that are available in the OpenSSL cryptographic library.

The PWXUSSL utility runs from the root PowerExchange installation directory. For example, on a Windows server, you might run the utility from the C:\Informatica\PowerExchange
v.r.m
directory. The PWXUSSL utility supports the following commands and reports:

CONVERT_PKCS12_PEM command. Converts certificates that were created on z/OS in PKCS12DER format to the PEM format that can be used on Linux, Unix, and Windows machines.

To convert a certificate, enter the following command:

PWXUSSL CMD=CONVERT_PKCS12_PEM INFILE=pkcs12_file_name [PWD=password|EPWD=encrypted_password] OUT_FILE=pem_file_name [OUT_ENCODING=[DES3|DES_EDE3_CBC|NONE] OUT_PWD=password]

If OUT_ENCODING is not specified, the DES3 format is used for the output file. If OUT_PASSWORD is not specified, the password or encrypted password associated with the input file is used for the output file.

PING command. Verifies that a secure connection can be established between the machine from which you issue the command and a PowerExchange Listener on a remote node.

To PING a connection, enter the following command:

PWXUSSL CMD=PING PING_LOCATION=node_name [PING_UID=user_name {PING_PWD=password|PING_EPWD=encrypted_password}]

Certificate report. Reports information from a certificate chain file.

To generate a certificate report, enter the following command:

PWXUSSL CMD=REPORT_CERTIFICATE INFILE=infile_name [INFORM={PEM|PKCS12|DER}] [REPORTFORMAT={OPENSSL|SUMMARY|TEXT|ALL}] [PWD=password|EPWD=encrypted_password]

Ciphers report. Reports the cipher suites that are available in the OpenSSL cryptographic library.

To generate a ciphers report, enter the following command:

PWXUSSL CMD=REPORT_CIPHERS [CIPHER_LIST=list] [CONTEXT_METHOD={TLSV1|TLSV1_1|TLSV1_2|DTLSV1]

Codes report. Reports the return codes from an attempt to establish a secure connection between a PowerExchange Listener and client.

To generate a codes report, enter the following command:

PWXUSSL CMD=REPORT_CODES [CODE_TYPE={ALL|CATYPES|VERIFYRC}]

Configuration report. Reports the the security configuration of the machines that participate in a secured connection. You can filter the results to include a specific participant type, such as a PowerExchange client or PowerExchange Listener.

To generate a configuration report, enter the following command:

PWXUSSL CMD=REPORT_CONFIG [CLIENT_LISTENER_TYPE={ALL|CLIENT|LISTENER}] [NAME=node_name]

Error codes report. Reports error codes returned from SSL processing during an attempt to establish a secure connection between the PowerExchange Listener and client.

To generate an error codes report, enter the following command:

PWXUSSL CMD=REPORT_ERROR_CODES [ERROR_CODE_TYPE={ALL|LIBRARIES|FUNCTIONS|REASONS}]

Version report. Reports the version of OpenSSL that was used to build the cryptographic library.

To generate a version report, enter the following command:

PWXUSSL CMD=REPORT_VERSION

For more information about the PWXUSSL utility, see the

PowerExchange Utilities Guide

Implementing TLS Security in a PowerExchange Network

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal

0 COMMENTS

We’d like to hear from you! Log in to comment.

Rename Saved Search

Table of Contents

Implementing TLS Security in a PowerExchange Network

Implementing TLS Security in a PowerExchange Network

PWXUSSL Utility

PWXUSSL Utility