RACF Certificate expiration

Discussion of Co:Z sftp, a port of OpenSSH sftp for z/OS
Post Reply
gngrossi
Posts: 38
Joined: Sat Mar 06, 2010 6:10 pm

RACF Certificate expiration

Post by gngrossi »

What is the process to update the expiration date of the RACF certificate (used by saf-ssh-agent) for SSH authentication? Is it possible to update the expiration date without needing to generate and deploy a new public key? Thanks.
dovetail
Site Admin
Posts: 2025
Joined: Thu Jul 29, 2004 12:12 pm

Re: RACF Certificate expiration

Post by dovetail »

There is an example of doing this in the User's Guide:
http://dovetail.com/docs/sftp/auth.html#auth-racf (at the end of the page)

Unfortunately, this (the easy way) has to be done before the key expires.
Otherwise, I am not certain of the process, but in theory it should be possible by extracting the private key and constructing a new self-signed certificate with it.
Note: this would assume that the private key were not stored in ICSF (PKDS). Apparently those cannot be exported.
Post Reply