Table 1 lists the updates to the System SSL application interface for SSL/TLS APIs.
| API | Release | Description | Reason for change |
|---|---|---|---|
| gsk_construct_certificate() | z/OS V2R1 | Changed: Added support for generating signed DSA certificates with key size of 2048-bits and signed certificates with DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R13 | Changed: Added support for generating signed ECDSA certificates. |
ECDSA certificate support | |
| z/OS V1R12 | Changed: Added support for generating a certificate that is signed by an ECDSA certificate. |
ECDSA certificate support | |
| gsk_construct_private_key() | z/OS V1R12 | New: Constructs an RSA, DSA, or ECDSA public key from its component values. |
Release update |
| gsk_construct_public_key() | z/OS V1R12 | New: Constructs an RSA, DSA, or ECDSA public key from its component values. |
Release Update |
| gsk_construct_renewal_certificate() | z/OS V2R1 | Changed: Added support for generating certificate requests with DSA key size of 2048-bits and certificate requests that are signed with DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| gsk_construct_renewal_request() | z/OS V1R12 | Changed: Added support for generating an ECDSA renewal certificate request. |
ECDSA certificate support |
| gsk_construct_self_signed_certificate() | z/OS V2R1 | Changed: Added support for generating self-signed DSA certificates with key size of 2048-bits and DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R13 | Changed: Added support for generating self-signed ECDSA certificates. |
ECDSA certificate support | |
| gsk_construct_signed_certificate() | z/OS V2R1 | Changed: Added support for signing certificate requests using DSA 2048-bit keys and DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for generating a certificate that is signed by an ECDSA certificate. |
ECDSA certificate support | |
| gsk_create_certification_request() | z/OS V2R1 | Changed: Added support for generating certificate requests with DSA key size of 2048-bits and certificate requests that are signed with DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R13 | Changed: Added support for generating ECDSA certificate requests. |
ECDSA certificate support | |
| gsk_create_database_renewal_request() | z/OS V2R1 | Changed: Added support for generating certificate renewal requests with DSA key size of 2048-bits and certificate requests that are signed with DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for generating an ECDSA renewal certificate request. |
ECDSA certificate support | |
| gsk_create_database_signed_certificate() | z/OS V2R1 | Changed: Added support for signing certificate requests using DSA 2048-bit keys and certificate requests that are signed with DSA SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R13 | Changed: Added support for creating a signed ECDSA certificate. |
ECDSA certificate support | |
| z/OS V1R12 | Changed: Added support for generating a certificate that is signed by an ECDSA certificate. |
ECDSA certificate support | |
| gsk_create_renewal_request() | z/OS V2R1 | Changed: Added support for generating certificate requests with DSA key size of 2048-bits and certificate requests that are signed with DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for generating an ECDSA certificate renewal request. |
ECDSA certificate support | |
| gsk_create_self_signed_certificate() | z/OS V2R1 | Changed: Added support for generating self-signed DSA certificates with key size of 2048-bits and DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R13 | Changed: Added support for generating self-signed ECDSA certificates. |
ECDSA certificate support | |
| gsk_create_signed_certificate() | z/OS V1R12 | Changed: Added support for generating a certificate that is signed by an ECDSA certificate. |
ECDSA certificate support |
| gsk_create_signed_certificate_record() | z/OS V2R1 | Changed: Added support for generating signed DSA certificates with key size of 2048-bits and DSA certificates with DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for generating a certificate that is signed by an ECDSA certificate. |
ECDSA certificate support | |
| gsk_create_signed_certificate_set() | z/OS V2R1 | Changed: Added support for generating signed DSA certificates with key size of 2048-bits and signed certificates with DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R13 | Changed: Added support for generating signed ECDSA certificates. |
ECDSA certificate support | |
| z/OS V1R12 | Changed: Added support for generating a certificate that is signed by an ECDSA certificate. |
ECDSA certificate support | |
| gsk_create_signed_crl() | z/OS V1R12 | Changed: Added support for signing a CRL with ECDSA with SHA-1. |
ECDSA certificate support |
| gsk_create_signed_crl_record() | z/OS V2R1 | Changed: Added support for generating a signed CRL using DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing a CRL with ECDSA with SHA-1, SHA-224, SHA-256, SHA-384 or SHA-512. |
ECDSA certificate support | |
| gsk_decode_certificate_extension() | z/OS V2R1 | Changed: Added support for decoding HostIDMapping extension. |
Enhanced x.509 certificate support |
| gsk_encode_certificate_extension() | z/OS V2R1 | Changed: Added support for encoding HostIDMapping extension. |
Enhanced x.509 certificate support |
| gsk_encode_ec_parameters() | z/OS V1R13 | New: Encodes the EC domain parameters for an ECC key. |
ECDSA certificate support |
| gsk_encode_export_key() | z/OS V2R1 | Changed: Added support for exporting RSA and ECDSA certificates with their private keys when the private keys are stored as extractable secure private keys in the TKDS. |
Support for secure private keys in a PKCS #11 token |
| gsk_export_key() | z/OS V2R1 | Changed: Added support for exporting RSA and ECDSA certificates with their private keys when the private keys are stored as extractable secure private keys in the TKDS. |
Support for secure private keys in a PKCS #11 token |
| gsk_factor_private_key() | z/OS V1R12 | New: Factorizes an RSA, DSA, or ECDSA private key into its component values. |
Base elliptic curve support |
| gsk_factor_public_key() | z/OS V1R12 | New: Factorizes an RSA, DSA, or ECDSA public key into its component values. |
Base elliptic curve support |
| gsk_free_private_key() | z/OS V1R12 | New: Releases storage that is allocated for private key information. |
Base elliptic curve support |
| gsk_free_public_key() | z/OS V1R12 | New: Releases storage that is allocated for public key information. |
Base elliptic curve support |
| gsk_generate_key_pair() | z/OS V2R1 | Changed: Added support for generation of DSA 2048-bit key pairs. |
Enhanced DSA support |
| z/OS V1R13 | Changed: Added support for generating ECC key pairs. |
Base elliptic curve support | |
| gsk_generate_key_parameters() | z/OS V1R13 | Changed: Added support for generating ECC key parameters. |
Base elliptic curve support |
| gsk_get_certificate_info() | z/OS V1R12 | New: Returns requested certificate information for an X.509 certificate. |
Release update |
| gsk_get_cms_vector() | z/OS V2R1 | Changed: Added GSK_CMS_LVL9 function mask. |
Release update |
| z/OS V1R13 | Changed: Added GSK_CMS_LVL8 function mask. |
Release update | |
| z/OS V1R12 | Changed: Added GSK_CMS_LVL7 function mask. |
Release update | |
| gsk_get_ec_parameters_info() | z/OS V1R12 | New: Get the named curve type and key size for EC domain parameters. |
Base elliptic curve support |
| gsk_make_enveloped_data_content() | z/OS V2R1 | Changed: Added support for encrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
gsk_make_enveloped_data_content_ |
z/OS V2R1 | Changed: Added support for encrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
| gsk_make_enveloped_data_msg() | z/OS V2R1 | Changed: Added support for encrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
gsk_make_enveloped_data_msg_ |
z/OS V2R1 | Changed: Added support for encrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
| gsk_make_enveloped_private_key_msg() | z/OS V2R1 | New: Create a PKCS#7 EnvelopedData message containing an RSA or ECDSA private key. Private key is a secure key stored in a PKCS #11 token. |
Enhanced PKCS#7 support |
| gsk_make_signed_data_content() | z/OS V2R1 | Changed: Added support for signing using digital signatures DSA with SHA-224 and SHA-256. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing with ECDSA digital signatures. |
ECDSA certificate support | |
gsk_make_signed_data_content_ |
z/OS V2R1 | Changed: Added support for signing using digital signatures DSA with SHA-224 and SHA-256. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing with ECDSA digital signatures. |
ECDSA certificate support | |
| gsk_make_signed_data_msg() | z/OS V2R1 | Changed: Added support for signing using digital signatures DSA with SHA-224 and SHA-256. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing with ECDSA digital signatures. |
ECDSA certificate support | |
gsk_make_signed_data_msg_ |
z/OS V2R1 | Changed: Added support for signing using digital signatures DSA with SHA-224 and SHA-256. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing with ECDSA digital signatures. |
ECDSA certificate support | |
| gsk_modify_pkcs11_key_label() | z/OS V2R1 | New: Returns a gsk_buffer containing a TKDS key token label with either an "=" added or removed from the first position. |
Support for secure private keys in a PKCS #11 token |
| gsk_perform_kat() | z/OS V1R13 | Changed: Enhanced to run HMAC-SHA-256 and HMAC-SHA-384 known answer tests. |
FIPS 140-2 support |
| gsk_query_crypto_level() | z/OS V2R1 | Changed: Updated SSL run time level. |
Release update |
| z/OS V1R13 | Changed: Updated SSL run time level. |
Release update | |
| z/OS V1R12 | Changed: Updated SSL run time level. |
Release update | |
| gsk_read_enveloped_data_content() | z/OS V2R1 | Changed: Added support for decrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
gsk_read_enveloped_data_content_ |
z/OS V2R1 | Changed: Added support for decrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
| gsk_read_enveloped_data_msg() | z/OS V2R1 | Changed: Added support for decrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
gsk_read_enveloped_data_msg_ |
z/OS V2R1 | Changed: Added support for decrypting the message content using AES CBC (128-bit and 256-bit). |
Enhanced PKCS#7 support |
| gsk_read_signed_data_content() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for verifying ECDSA digital signatures. |
ECDSA certificate support | |
gsk_read_signed_data_content_ |
z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for verifying ECDSA digital signatures. |
ECDSA certificate support | |
| gsk_read_signed_data_msg() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for verifying ECDSA digital signatures. |
ECDSA certificate support | |
gsk_read_signed_data_msg_ |
z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for verifying ECDSA digital signatures. |
ECDSA certificate support | |
| gsk_sign_certificate() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing with ECDSA digital signatures. |
Base elliptic curve support | |
| gsk_sign_crl() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing with ECDSA digital signatures. |
Base elliptic curve support | |
| gsk_sign_data() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for signing with ECDSA digital signatures. |
Base elliptic curve support | |
| gsk_validate_certificate() | z/OS V1R13 | Changed: Added support for gskdb_source_crl_callback. |
Enhanced certificate support |
| gsk_validate_certificate_mode() | z/OS V2R1 | Changed: Add support for validating certificates and certificate chain according to RFC 5280. |
Enhanced x.509 certificate support |
| z/OS V1R13 | Changed: Added support for gskdb_source_crl_callback. |
Enhanced certificate support | |
| gsk_verify_certificate_signature() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for verifying with ECDSA digital signatures. |
Base elliptic curve support | |
| gsk_verify_crl_signature() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for verifying with ECDSA digital signatures. |
Base elliptic curve support | |
| gsk_verify_data_signature() | z/OS V2R1 | Changed: Added support for verifying DSA with SHA-224 or SHA-256 digital signatures. |
Enhanced DSA support |
| z/OS V1R12 | Changed: Added support for verifying with ECDSA digital signatures. |
Base elliptic curve support |