* The z/OS and USS packages are now built for minimum version 1 release 13
* Remote file access via SSH (SFTP) including wildcard/directory support
** Supports public key and password authentication
** Communication parameters are passed via properties (net.ssh() object) or via URL (see below)
** URL: file='ssh://user:password@hostname:port//path/file.ext'
*** Only hostname and filepath are mandatory
**** e.g. file='ssh://hostname//path/file.ext'
*** Host and remote file path are separated by a slash
*** Absolute paths require another slash (i.e. // after the hostname)
*** The username defaults to the local username if not specified
*** Password authentication is attempted if a password is specified
*** Public key authentication uses the key pair in ~/.ssh/ by default
*** Replacements can be used in the URL
**** e.g. file='ssh://<cuser>@hostname//myfile.txt (<cuser> is replaced with lower case local user id)
** Record-oriented datasets are written remotely like the record I/O works on Windows and Unix systems
** Currently FLAM4FILEs are not supported (special user I/O required, will be supported later)
** Static allocations (DD:NAME) are not supported with remote access
** Most other kinds of files (log, info, report, ...) are supported via SSH
** Configuration, property, trace and inverse command files must be local
** See the documentation for the net.ssh object for more details
* New NoMkDir parameter to prevent automatic directory creation on write
* Add PGP key ring support (software implementation of RFC4880)
** Supports all symmetric and asymmetric algorithms available with OpenSSL (libcrypto)
** Key ring files are compatible to GnuPG and can be used by both solutions
** Extended PKCS#11 implementation which works like the software key ring solution
** Extended new CCA/ICSF implementation which uses a PGP trust store together with the PKDS
*** With this solution you can first migrate from GnuPG to FLAM-PGP (using the password protected key rings)
*** Then you can import the private key store to the CCA/ICSF device for more security
** PGP primary and subkeys may contain the same key (can be imported with a warning, but cannot be generated)
* Use FLAM4 system header to store file size, CCSID, binary delimiter and other parameters in the member header of a FLAM4FILE
** If FLUC is used to write and read a FLAM4FILE, then the CCSID, binary delimiter and file size for a member is known
* If the input file was set to STREAM, the output file now also defaults to STREAM
* Fix handling of multi disk values for ZIP64 files
* Reduce the amount of ZIP64 extra fields in the central directory file header to a minimum
* Correct large block support in FLAM4 for z/OS (required for tapes)
** Correction of block size smaller than 32k was damaged (works now like in the past)
** Correction of block sizes greater than 32k is not possible (block size must be a correct value)
* FLCC does not add hard coded defaults to generated FLCL commands anymore
* Improve MF-EDZ support for FLAM4 record interface (WIN/UNIX)
** Support usage of the FLAM record interface in EBCDIC
* File creation and modification times are now set correctly
* Improve Windows and UNIX install.txt with first steps after installation
* Suppression of trailing whitespace for record format OPN-TXT is only done if SUPPAD is specified for FIO.REC()
** Add 0x0D (ASCII and EBCDIC) to record delimiter if record format text is used (was suppressed to date)
** Record format text requires well formed text delimiter (dirty delimiter are only supported with format text)
* Improve ASCII EBCDIC separation in character set detection
* Add block size parameter to HASH command (no longer uses hard coded value (1MiB))
* Sort member list of a ZIP archive to ensure ascending offsets (can improve read performance)
* Improved general I/O performance
* Support STREAM (read from STDIN and write to STDOUT) and DUMMY files in FIO.FL4() component
* Use STREAM as default in FLAM command if no file name given to be backwards compatible with the old FLAM4 utility
* Allow empty parameter strings for all FLCL commands ("FLCL XCNV" == COPY "FLCL FLAM" is DECO from STDIN to STDOUT)
* Add CCA/ICSF support on USS (use of hardware cryptography like on z/OS)
* Support for clear key cryptography with CCAPGP and FKMECCA
** Use of ICSF without crypto cards (CC)
** A cryptographic accelerator (CA) for PGP is required
** Supports clear or protected DES, 3DES and AES keys with ICSF
* Move the (CCA-specific) key label template (!FLAMPGP.%u.%t) parameter from PGP to FKM5-CCA
* Default PGP FKM5 function for the non-mainframe world is now PGPRING (PGP key rings) instead of P11
* Add some common use cases as examples at the beginning of the FLCL user manual
* Add default IDENT (owner ("limes")) for logging facilities
* Change all trace messages of FLUC to debug log messages for easier error analysis
* Add NIST self test to crypto kernel
** Runs a self test against test vectors at initialization
** Ensures that all assigned algorithms work correctly
* Fix damaged ZIP files with offsets greater then 4 GB on Windows
* Support "..." or '...' in subsystem allocation parameter (required for LOGR)
* Fix reading of encrypted FLAMFILEs via directory walk
** Processing of the second member emitted a wrong key error because the key value was securely erased from memory too early
** The password or FKME parameter are now only set once per FLAMFILE and not for each member
** Set secure info parameter to member by default if directory walk or member access used
* Windows context menus are now working properly on all supported windows versions
* Add usage reporting to a log stream for z/OS
** The usage reporting can be used to determine cost savings using ZEDC, ZIIP or other co-processors with FLAM
** This feature was implemented for all customers using our programming interfaces to determine the CPU usage for each FLAM component
** See install.txt for z/OS for more information how to configure and evaluate the log stream
** Add new log type USAGE which activates writing of usage log entries also to the normal log (SYSOUT)
* Add new set of environment variables (FL_DEFAULT_PGPRNG/P11/CCAPARA) to define the default FKM5 PGP parameter
* Correct OpenPGP S2K method if hash is smaller than needed key and you have to calculate second hash
* Support system variables for environment variable LANG and ENVID on z/OS (see install.txt)
* Support system variable to control usage of ZEDC in FLAM4 for MODE=ADC (see install.txt)
* Correct AMODE and RMODE in FLMDIR (fix segmentation fault (0C4) in build 15352)
** Default values of linkage editor for AMODE and RMODE are different between z/OS 1.13 and 2.2
* Correct whitespace handling in string converter for numbers
* Correct wrong relative time entries over the command line
- 0000823: [b. Packaging] JAR file for the java byte interface and stream classes are missing in FLAM packages (Tilo Eckert) - resolved. - 0000822: [1.1 FLCL] Add support for system variables on z/OS (Falk Reichbott) - resolved. - 0000826: [1.2 FLCC] Prevent RACF and LOGR messages if no log stream for usage logging defined (Rolf-Dieter Euler) - resolved. - 0000811: [4. Element, Byte, Record or other API] Support of SMF record type 89 for FLAM components (Rolf-Dieter Euler) - resolved. - 0000742: [2.2 Subprogram FLUC (CONV)] Support of PGP key rings in FLAM (Mykhailo Moldavskyy) - resolved. - 0000746: [2.2 Subprogram FLUC (CONV)] Support all asymmetric algorithm of RFC4880 with PKCS#11 (Mykhailo Moldavskyy) - resolved. - 0000740: [2.2 Subprogram FLUC (CONV)] Support all specified symmetric algorithmns of RFC4880 (OpenPGP) (Mykhailo Moldavskyy) - resolved. - 0000821: [2.2 Subprogram FLUC (CONV)] Support DUMMY at read and write of FLAMFILEs on UNIX and WINDOWS (Ulrich Schwab) - resolved. - 0000819: [1.1 FLCL] Support STREAMing for FLAMFILEs in FLCL (Falk Reichbott) - resolved. - 0000658: [2.2 Subprogram FLUC (CONV)] Write converted data of FLUC direct with SSH to remote system (Tilo Eckert) - resolved. - 0000134: [2.2 Subprogram FLUC (CONV)] Use FLAM4 system header for normal FL5-IO (Falk Reichbott) - resolved.
