IBM Mainframe Forum

I have the following JCL where I tried to generate GSK trace to see the SSL handshaking flow (when FTP setup to use AT-TLS):


//S1 EXEC PGM=BPXBATCH,REGION=8M,

// PARM='sh ftp -d kalda01.ddns.net 2821 -f /u/smpe/z2ftp2.data'

//*

//STEPLIB DD DSN=CEE.SCEERUN,DISP=SHR

//STDERR DD PATH='/u/smpe/mystd1.err',

// PATHOPTS=(OWRONLY,OCREAT,OTRUNC),PATHMODE=SIRWXU

//STDOUT DD PATH='/u/smpe/mystd1.out',

// PATHOPTS=(OWRONLY,OCREAT,OTRUNC),PATHMODE=SIRWXU

//STDIN DD PATH='/u/smpe/ftp.sh',PATHOPTS=(ORDONLY)

//*

//STDENV DD *

GSK_TRACE=0xFFFF

GSK_TRACE_FILE=/u/smpe/gskfile.trc

GSK_PROTOCOL_TLSV1_2=ON

//


I am not getting any trace output in "/u/smpe/gskfile.trc "

can you tell me what I need to do in order to produce the SSL trace ?

Hi Danik56

Follow this instruction.

https://www.ibm.com/support/pages/how-capture-and-format-ssl-component-trace



Thanks
Arun Prasad

I already tried this process and the trace output dataset is empty.
Maybe FTP client is not using system SSL when AT-TLS policy is used ?