Use OpenSSL or IBM System SSL for XCOM for z/OS SSL setup

Products

• XCOM - SUPPORT
• XCOM Data Transport - z/OS

Issue/Introduction

Preparing to setup SSL with XCOM for z/OS, and not sure which SSL should be used, IBM System SSL or supplied XCOM modified OpenSSL?

Environment

Release : 12.0

Component : CA XCOM Data Transport for z/OS

IBM SystemSSL

Resolution

Per this page: CA XCOM Data Transport for z/OS 12.0 > Release Notes > Deprecated Features
OpenSSL been deprecated for use by XCOM on z/OS. OpenSSL only supports older SSL protocols SSLv3 and TLSv1.0 whereas System SSL supports TLSv1.0, TLSv1.1 and TLSv1.2.
Also, the OpenSSL version shipped with XCOM is back leveled and has not been updated to address vulnerabilities.
Thus it is recommended that IBM SystemSSL should be used.