IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

IBM Encryption Facility OpenPGP - ASCII conversion


IBM Mainframe Forums -> IBM Tools
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
Mark Walker69

New User


Joined: 26 Jan 2015
Posts: 2
Location: United Kingdom

PostPosted: Thu Oct 15, 2015 10:43 pm
Reply with quote

Good day everyone - my first post so please be gentle icon_smile.gif

We have installed IBM Encryption Facility V1R2 onto z/OS 2.1 - with CPACF and ICSF (HCR77A0) and are trying to utilise OpenPGP support.

z/OS to z/OS we have no problems - Enc/dec is successful.

However, we are having issues when decrypting PGP encrypted messages from ASCII based platforms. The decryption itself is successful but it doesn't convert to ascii or account for CRLF - for example:

this is displayed (I have put hex on for clarity - I hope):

Code:
ÈÇÑË ÑË / ÈÁËÈ ÃÑ%Á ÃÊ?_ ÏÑ>À?ÏË  ÏÑÈÇ / Ä/ÊÊÑ/ÅÁ ÊÁÈÍÊ>  %/ËÈ %Ñ>Á             
76672672627677266662676627666677007676262667766662767776006677266660000000000000
48930930104534069C5062FD079E4F73DA794801031229175025452EDAC1340C9E50000000000000
------------------------------------------------------------------------------- 
******************************** Bottom of Data ********************************



I can show that the decryption has worked (to a point) as entering source ascii and LF in a ISPF View/Edit session it shows this:

this is a test file from windows
76672672627677266662676627666677002222222222222222222222222222222222222222222222
48930930104534069C5062FD079E4F73DA0000000000000000000000000000000000000000000000
-------------------------------------------------------------------------------
with a carriage return
76762626677666627677760022222222222222222222222222222222222222222222222222222222
794801031229175025452EDA00000000000000000000000000000000000000000000000000000000
-------------------------------------------------------------------------------
last line
66772666600000000000002222222222222222222222222222222222222222222222222222222222
C1340C9E500000000000000000000000000000000000000000000000000000000000000000000000
-------------------------------------------------------------------------------
******************************** Bottom of Data ********************************

I am aware of the -t option for decryption that should treat the incoming message as coming from an ascii platform - however it doesn't appear to work.

Now is this a mis-interpretation on my part or is it something not quite working as expected.

The arguments to decrypt (in batch) are:

-homedir /etc/encryptionfacility/
-o '//DD:DDEF'
-debug-on
-debug 2
-debug-level 1
-t ISO-8859-1
-d //USER.TEST.PGP.FROM.WIN.BIN

This is the same whether the input is a pgp file or an ASCII armored file (.asc).

I have checked as much as I can in the manuals to no avail and I was wondering if anyone else has experience in this before I call out to IBM tech support.

Thank you in advance and excuse me if the post is put in wrong forum or is inappropriate.
Back to top
View user's profile Send private message
Mark Walker69

New User


Joined: 26 Jan 2015
Posts: 2
Location: United Kingdom

PostPosted: Fri Feb 05, 2016 9:16 pm
Reply with quote

Found out what it was in the end.

Although the docs don't really specify it, the -t option will only convert from ascii to ebcdic on the z/OS platform if the source is encrypted with the -t or -textmode option (dependent upon utility used to encrypt.

This will put a flag on the header of the message to say that it can be decrypted using the -t (-textmode) and will convert as required.

Anyway - problem solved
Back to top
View user's profile Send private message
enrico-sorichetti

Superior Member


Joined: 14 Mar 2007
Posts: 10801
Location: italy

PostPosted: Fri Feb 05, 2016 9:23 pm
Reply with quote

thank You for letting us know that the problem is solved
Back to top
View user's profile Send private message
Terry Heinze

JCL Moderator


Joined: 14 Jul 2008
Posts: 1249
Location: Richfield, MN, USA

PostPosted: Mon Feb 08, 2016 8:27 pm
Reply with quote

...and in the future, please use Code tags and use copy/paste instead of attachments.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> IBM Tools

 


Similar Topics
Topic Forum Replies
No new posts Help this REXX Rookie-Bad arithmetic ... CLIST & REXX 7
No new posts SSHA256 Encryption using ICSF COBOL Programming 0
No new posts CONTROL-M SCHEDULING DEFINITION FACILITY Compuware & Other Tools 1
No new posts Date conversion using SORT SYNCSORT 4
No new posts include cond ascii constant DFSORT/ICETOOL 4
Search our Forums:

Back to Top