Preparing to setup SSL with XCOM for z/OS, and not sure which SSL should be used, IBM System SSL or supplied XCOM modified OpenSSL?
Release : 12.0
Component : CA XCOM Data Transport for z/OS
Per this page: CA XCOM Data Transport for z/OS 12.0 > Release Notes > Deprecated Features
OpenSSL been deprecated for use by XCOM on z/OS. OpenSSL only supports older SSL protocols SSLv3 and TLSv1.0 whereas System SSL supports TLSv1.0, TLSv1.1 and TLSv1.2.
Also, the OpenSSL version shipped with XCOM is back leveled and has not been updated to address vulnerabilities.
Thus it is recommended that IBM SystemSSL should be used.