[z/OS]

Setting up SSL connections for Java clients

Follow these steps to configure SSL for use between Java™ clients running on a workstation and the WebSphere® Application Server for z/OS® Java Platform, Enterprise Edition (Java EE) server.

Procedure

  1. Determine what SSL repertoire the server is using.
    For example: WASKeyring.
  2. Determine the user ID the server is running.
    For example: CBSYMSR1.
  3. Export the certificate authority from RACF®.
    For example: 
    RACDCERT CERTAUTH EXPORT(LABEL('WebSphereCA')) DSN('IBMUSER.WAS.CA') FORMAT(CERTDER)
  4. Move the file to the workstation. (Note that the FTP transfer must use binary.)
    For example: \tmp directory
  5. Add the digital certificate to the TrustStore used by the client.
    For example, for the DummyClientTrustFile.jks file, type: 
    keytool -import -file \tmp\IBMUSER.WAS.CA -keystore DummyClientTrustFile.jks]