IBM i System TLS has been enhanced in IBM i 7.4 to support the latest industry standard of Transport Layer Security version 1.3 (TLSv1.3) protocol.
IBM i System TLS has been enhanced to support the latest industry standard of Transport Layer Security version 1.3 (TLSv1.3) protocol. TLSv1.3 is enabled and used by default for partitions with system value QSSLPCL set to *OPSYS. Applications designed to use the System TLS default protocols will immediately support TLSv1.3 if the system value settings allow TLSv1.3. Other applications require configuration or code changes to enable TLSv1.3.
Refer to Transport Layer Security in the IBM i Knowledge Center for additional details.
The new Retrieve TLS Attributes (QsoRtvTLSA) API allows the retrieval of the system-wide System TLS current default properties. The properties can be changed and viewed with TLSCONFIG. The benefit of QsoRtvTLSA is that it can be included in programs or scripts for health check actions. Refer to QsoRtvTLSA in the IBM i Knowledge Center for more details on its use.
09 January 2020