|
View previous topic :: View next topic
|
| Author |
Message |
Mark Walker69
New User
Joined: 26 Jan 2015
Posts: 2
Location: United Kingdom
|
|
|
|
Good day everyone - my first post so please be gentle 
We have installed IBM Encryption Facility V1R2 onto z/OS 2.1 - with CPACF and ICSF (HCR77A0) and are trying to utilise OpenPGP support.
z/OS to z/OS we have no problems - Enc/dec is successful.
However, we are having issues when decrypting PGP encrypted messages from ASCII based platforms. The decryption itself is successful but it doesn't convert to ascii or account for CRLF - for example:
this is displayed (I have put hex on for clarity - I hope):
| Code: |
ÈÇÑË ÑË / ÈÁËÈ ÃÑ%Á ÃÊ?_ ÏÑ>À?ÏË ÏÑÈÇ / Ä/ÊÊÑ/ÅÁ ÊÁÈÍÊ> %/ËÈ %Ñ>Á
76672672627677266662676627666677007676262667766662767776006677266660000000000000
48930930104534069C5062FD079E4F73DA794801031229175025452EDAC1340C9E50000000000000
-------------------------------------------------------------------------------
******************************** Bottom of Data ******************************** |
I can show that the decryption has worked (to a point) as entering source ascii and LF in a ISPF View/Edit session it shows this:
this is a test file from windows
76672672627677266662676627666677002222222222222222222222222222222222222222222222
48930930104534069C5062FD079E4F73DA0000000000000000000000000000000000000000000000
-------------------------------------------------------------------------------
with a carriage return
76762626677666627677760022222222222222222222222222222222222222222222222222222222
794801031229175025452EDA00000000000000000000000000000000000000000000000000000000
-------------------------------------------------------------------------------
last line
66772666600000000000002222222222222222222222222222222222222222222222222222222222
C1340C9E500000000000000000000000000000000000000000000000000000000000000000000000
-------------------------------------------------------------------------------
******************************** Bottom of Data ********************************
I am aware of the -t option for decryption that should treat the incoming message as coming from an ascii platform - however it doesn't appear to work.
Now is this a mis-interpretation on my part or is it something not quite working as expected.
The arguments to decrypt (in batch) are:
-homedir /etc/encryptionfacility/
-o '//DD:DDEF'
-debug-on
-debug 2
-debug-level 1
-t ISO-8859-1
-d //USER.TEST.PGP.FROM.WIN.BIN
This is the same whether the input is a pgp file or an ASCII armored file (.asc).
I have checked as much as I can in the manuals to no avail and I was wondering if anyone else has experience in this before I call out to IBM tech support.
Thank you in advance and excuse me if the post is put in wrong forum or is inappropriate. |
|
| Back to top |
|
 |
Mark Walker69
New User
Joined: 26 Jan 2015
Posts: 2
Location: United Kingdom
|
|
|
|
Found out what it was in the end.
Although the docs don't really specify it, the -t option will only convert from ascii to ebcdic on the z/OS platform if the source is encrypted with the -t or -textmode option (dependent upon utility used to encrypt.
This will put a flag on the header of the message to say that it can be decrypted using the -t (-textmode) and will convert as required.
Anyway - problem solved |
|
| Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007
Posts: 10873
Location: italy
|
|
|
|
| thank You for letting us know that the problem is solved |
|
| Back to top |
|
|
Terry Heinze
JCL Moderator
Joined: 14 Jul 2008
Posts: 1249
Location: Richfield, MN, USA
|
|
|
|
| ...and in the future, please use Code tags and use copy/paste instead of attachments. |
|
| Back to top |
|
|
|
|
