XCOM for AS/400 (iSeries) service packs TLS version support

Products

• XCOM Data Transport

Issue/Introduction

Which versions of SSL/TLS (Transport Layer Security) do the XCOM Data Transport for AS/400 (iSeries) 11.0 service packs support?

Environment

Release: 11.0 SP00, 11.0 SP01, 11.0 SP02

Resolution

• XCOM Data Transport for AS/400 11.0 SP00 (GA 2007) only supports SSL v3.
  This version still used the TCP/IP pre-started jobs. If SSL is used, the pre-started jobs would fail frequently and the associated pre-started job would become unavailable. Therefore using SSL in a production environment was not recommended.
  NOTE: 11.0 SP00 has reached End of Service on October 31, 2022: End of Service Announcement for XCOM Data Transport for AS400 i5 OS v11.0 SP00
  
  
• XCOM Data Transport for AS/400 11.0 SP01 (GA 2009) base version only supports SSL v3.
  This version uses one job per TCP/IP transfer.
  TLS 1.0 support was added in SP01 PTF RO83699 ("XCOM - SSL 3.0 SECURITY ADVISORY CVE-2014-3566"). 
  There is no support for TLS 1.1 and TLS 1.2.
  
  
• XCOM Data Transport for AS/400 11.0 SP02 (GA 2017) adds support for TLS 1.1 and TLS 1.2. NOTE: In SP02 the OpenSSL software is provided by XCOM whereas previously it was provided by the Operating System.

The supported cipher suites are on this page: XCOM™ Data Transport® for AS/400 11.0 > Administrating > Generating TLS/SSL Certificates > Cipher Suites
SP02 would support all listed ciphers, but SP00 and SP01 would only support ciphers corresponding to their support of SSL v3 and TLS 1.0 per above.

Additional Information

XCOM Data Transport Community announcement: CA XCOM™ Data Transport® for IBM iSeries 11.0 SP02 is GA for more details.

Online documentation at  XCOM™ Data Transport® for AS/400 11.0

Download XCOM Data Transport for AS/400 i5/OS OS/400 RISC 11.0 SP02 at XCOM Product Downloads