Portal | Manuals | References | Downloads | Info | Programs | JCLs | Mainframe wiki | Quick Ref
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Profile Log in to check your private messages Log in
 
Generate public-private key in batch - ssh-keygen

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics
View previous topic :: :: View next topic  
Author Message
vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1528
Location: Chennai

PostPosted: Fri Sep 15, 2017 9:20 am    Post subject: Generate public-private key in batch - ssh-keygen
Reply with quote

Hi,

I generate public-private ssh key pair using the below process
Code:
# ssh-keygen -t rsa                                             
Generating public/private rsa key pair.                         
Enter file in which to save the key (/.ssh/id_rsa): doge_secure 
Enter passphrase (empty for no passphrase):                     
Enter same passphrase again:                                     
Your identification has been saved in doge_secure.               
Your public key has been saved in doge_secure.pub.               
The key fingerprint is:                                         
xx:yy:zz:aa:bb WELLS@MAIN     
#                   

Could you please let me know if this process can be done through batch JCL. Maybe with BPXBATCH?
Currently we do this manually and it is difficult to do it for quite a large number of users.

Regards,
Vasanth.S
Back to top
View user's profile Send private message

Bill O'Boyle

CICS Moderator


Joined: 14 Jan 2008
Posts: 2504
Location: Atlanta, Georgia, USA

PostPosted: Fri Sep 15, 2017 7:24 pm    Post subject: Reply to: Generate public-private key in batch - ssh-keygen
Reply with quote

Would you be using Software ( IE: IBM Crypto ) or Hardware ( IE: RACAL or ATALLA box ) to generate these keys? What service are you using via BPXBATCH?

I know this can be done via a CALL to a RACAL/e-Thales box as the box doesn't care whether it's Batch or On-Line. Did this in the late 90's, with the box running in its own address space.

Regards,
Back to top
View user's profile Send private message
vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1528
Location: Chennai

PostPosted: Fri Sep 15, 2017 11:58 pm    Post subject:
Reply with quote

Thanks Bill for looking at this
Code:
Would you be using Software ( IE: IBM Crypto ) or Hardware ( IE: RACAL or ATALLA box ) to generate these keys? What service are you using via BPXBATCH?


Currently I use the SSH shell in Mainframe with "ssh-keygen -t rsa " command.
I've used BPXBATCH to execute some Unix commands, so thought we could run "ssh-keygen -t rsa" command as well using BPXBATCH.

The only problem is that ssh-keygen -t rsa command is interactive and requires user input for the key file name so I do not know how to implement this in batch JCL.
Back to top
View user's profile Send private message
Bill O'Boyle

CICS Moderator


Joined: 14 Jan 2008
Posts: 2504
Location: Atlanta, Georgia, USA

PostPosted: Sat Sep 16, 2017 1:52 am    Post subject: Reply to: Generate public-private key in batch - ssh-keygen
Reply with quote

Could you write a CICS program which CALLS BPXBATCH, being invoked via an EXCI. When you return to the EXCI caller, place the BPXBATCH results in the commarea. Or perhaps, an MQ interface?

Regards,
Back to top
View user's profile Send private message
vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1528
Location: Chennai

PostPosted: Fri Nov 03, 2017 12:38 am    Post subject:
Reply with quote

Found the solution after quite a bit of experimenting.

Code:
//RUNSHEL1 EXEC PGM=BPXBATCH                         
//STDOUT   DD  SYSOUT=*                               
//STDERR   DD  SYSOUT=*                               
//STDPARM  DD  *                                     
SH ssh-keygen -b 2048 -t rsa -f /u/keypath -q -N "" 
/*                                                   
Back to top
View user's profile Send private message
Smita.t2

New User


Joined: 17 Apr 2012
Posts: 26
Location: Bangalore

PostPosted: Tue Nov 14, 2017 4:21 pm    Post subject:
Reply with quote

Thanks Vasanth for sharing it. I wish there was a like button icon_smile.gif
Back to top
View user's profile Send private message
vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1528
Location: Chennai

PostPosted: Tue Nov 14, 2017 11:42 pm    Post subject:
Reply with quote

Glad it was helpful :-)
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts Accessing CICS tran with map from JCL... navdeepaggarwal CICS 5 Tue Oct 03, 2017 6:15 pm
No new posts Working with hex values in Filemanage... Emile Straker IBM Tools 0 Tue Sep 12, 2017 1:42 am
No new posts Unable to copy data from spool in a d... srikant314 JCL & VSAM 8 Fri Jul 28, 2017 9:10 pm
No new posts How to generate a new unique Input fi... for1ranjith CLIST & REXX 11 Sat Jul 01, 2017 12:09 pm
No new posts HLIST Utility In Batch Virendra Shambharkar TSO/ISPF 4 Fri Apr 07, 2017 3:38 pm

Facebook
Back to Top
 
Job Vacancies | Forum Rules | Bookmarks | Subscriptions | FAQ | Polls | Contact Us