z/OS Cryptographic Services System SSL Programming
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Sysplex session ID cache

z/OS Cryptographic Services System SSL Programming
SC14-7495-00

GSKSRVR must be running in FIPS mode to maintain Sysplex Session ID cache entries for SSL server applications executing in FIPS mode. An SSL server application executing in FIPS mode caches its session in the Sysplex Session cache provided GSKSRVR is also executing in FIPS mode. An SSL server application executing in non-FIPS mode is able to cache its session in the Sysplex Session cache if GSKSRVR is executing in either FIPS mode or non-FIPS mode.

An SSL server application executing in FIPS mode is only able to resume a Sysplex Session cached session if it was for a session that executed in FIPS mode when the cache entry was created. Non-FIPS SSL server applications can resume FIPS and non-FIPS sessions that are cached in the Sysplex Session cache.

SSL servers executing in non-FIPS mode on systems with a back-level GSKSRVR are able to resume FIPS and non-FIPS sessions that are cached in the Sysplex Session cache by systems where the System SSL started task is executing in FIPS mode.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014