Extension for Terminal-based Applications supports SSL connections
by using Host On-Demand SSL functions.
To set up an SSL connection to a 3270 session using Stunnel:
- Configure the Stunnel for your host system.
- Start Stunnel. An SSL server that connects to
your host system on one port (the "connect" port) and accepts connections
on SSL (server and client authentication) on another port (the "accept" port)
starts.
- Type a password in the Stunnel prompt.
Important: Remember
this password for Extension for Terminal-based Applications configuration.
- Copy the file CustomizedCAs.p12 to the Extension for Terminal-based Applications installation directory, Extension
for Terminal Applications\eclipse\plugins\com.ibm.test.terminal.
It contains the root CAs you trust for your server. Functional Tester always
performs server authentication, hence you need this file in the working directory.
- Start Extension for Terminal-based Applications.
- Type as Host localhost, Port 8888,
and select Terminal type TN3270E.
- Configure the advanced settings in the Advanced Properties page
as follows:
- Set SSSCertificatePassword to password (for
the client)
- Set SSLCertificateProvided to true (certificates
if required by server)
- Set SSLServerAuthentication to true or false
Note: SSLCertificatePassword, SSLCertificatePromptHowOften and
SSLCertificateProvided are for client certificates if required by the server.
Regardless of whether SSLServerAuthentication is set to true or false, Extension for Terminal-based Applications will always authenticate the server.
- Click OK.