(ZOS) SSL repertoires

With SSL configuration repertoire, administrators can define any number of SSL settings that can be used to make HyperText Transport Protocol SSL (HTTPS), Internet Inter-ORB Protocol SSL (IIOPS) or LDAP SSL (LDAPS) connections.

Use the SSL configuration repertoire, we can pick one of the SSL settings defined here from any location within the administrative console which allows SSL connections. This simplifies the SSL configuration process since we can reuse many of these SSL configurations by simply specifying the alias in multiple places. The appropriate repertoire is referenced during the configuration of a service that sends and receives requests encrypted using SSL, such as the web and enterprise beans containers. Before deleting SSL configurations from the repertoire, remember that if an SSL configuration alias is referenced somewhere, and it is deleted here, an SSL connection will fail if the deleted alias is accessed.

We can also create an alias, but first create an SSL configuration repertoire alias or entry. We can then select the alias later when a component is configured for SSL support.

If we choose to use SSL, JSSE is the SSL repertoire type used. An exception to this is that System SSL (SSSL) is the SSL repertoire type used by the Daemon Address Space as the daemon runs without a JVM, but JSSE is only supported in Java.

Related:

Secure Sockets Layer security for WAS for z/OS