TTLSCipherParms statement

Parameters

name

A string 1 - 32 characters in length specifying the name of this TTLSCipherParms statement.

Rule: If this TTLSCipherParms statement is not specified inline within another statement, a name value must be provided. If a name is not specified for an inline TTLSCipherParms statement, a nonpersistent system name is created.

V2CipherSuites

Specifies the SSL version 2 cipher suites in order of preference. If a V2CipherSuites parameter is specified more than once, the values are concatenated to create a single list of cipher suites. For System SSL, the GSK_V2_CIPHER_SPECS value is set to the concatenated value.

The ciphers value is a string of one or more 1-character SSL version 2 ciphers or a single cipher constant. The cipher string cannot have blanks between each SSL version 2 cipher. If duplicate ciphers are specified, the first instance is used and all other instances are ignored. The maximum number of SSL version 2 ciphers is 10. For System SSL, see gsk_environment_open() in z/OS® Cryptographic Services System SSL Programming for a list of valid cipher suites. Table 1 lists the supported cipher constants.

Table 1. V2CipherSuites

Cipher constant	Hexadecimal character
TLS_RC4_128_WITH_MD5	1
TLS_RC4_128_EXPORT40_WITH_MD5	2
TLS_RC2_CBC_128_CBC_WITH_MD5	3
TLS_RC2_CBC_128_CBC_EXPORT40_WITH_MD5	4
TLS_DES_64_CBC_WITH_MD5	6
TLS_DES_192_EDE3_CBC_WITH_MD5	7

V3CipherSuites

Specifies the SSL Version 3, TLS Version 1.0, TLS Version 1.1, TLS Version 1.2, or TLS Version 1.3 cipher suites in order of preference. If a V3CipherSuites or V3CipherSuites4Char parameter is specified more than once, the values are concatenated to create a single list of cipher suites. For System SSL, the GSK_V3_CIPHER_SPECS_EXPANDED value is set to the concatenated value.

The ciphers value is a string of one or more 2-hexadecimal character SSL Version 3, TLS version 1.0, TLS Version 1.1, or TLS Version 1.2 ciphers or a single cipher constant. The cipher string cannot have blanks between each SSL Version 3, TLS version 1.0, TLS Version 1.1, or TLS Version 1.2 cipher. If the string notation is used, you cannot specify any cipher values that require four character representation. Use the V3CipherSuites4Char parameter to specify four character cipher string values. If duplicate ciphers are specified, the first instance is used and all other instances ignored. The maximum number of ciphers that can be specified is 255. For System SSL, see Appendix C. Cipher suite definitions in z/OS Cryptographic Services System SSL Programming for a list of valid cipher suites. Table 2 lists the supported cipher constants.

V3CipherSuites4Char

Specifies the SSL Version 3, TLS Version 1.0, TLS Version 1.1, TLS Version 1.2 or TLS Version 1.3 cipher suites in order of preference. If a V3CipherSuites or V3CipherSuites4Char parameter is specified more than once, the values are concatenated to create a single list of cipher suites. For System SSL, the GSK_V3_CIPHER_SPECS_EXPANDED value is set to the concatenated value.

The ciphers value is a string of one or more 4-hexadecimal character SSL Version 3, TLS version 1.0, TLS Version 1.1, TLS Version 1.2 or TLS Version 1.3 ciphers. The cipher string cannot have blanks between each SSL Version 3, TLS version 1.0, TLS Version 1.1, TLS Version 1.2 or TLS Version 1.3 cipher. Use the V3CipherSuites parameter to specify a cipher constant or 2-character cipher string values. If duplicate ciphers are specified, the first instance is used and all other instances ignored. The maximum number of ciphers that can be specified is 255.

For System SSL, see Appendix C. Cipher suite definitions in z/OS Cryptographic Services System SSL Programming for a list of valid cipher suites by supported protocol. Table 2 lists the supported cipher constants.