FLAM® Issue Tracker

FL5 - Change Log

FL5 - 5.1.13 (Released 2016-09-26) View Issues ]
==================================


 * The z/OS and USS packages are now built for minimum version 1 release 13
 * Remote file access via SSH (SFTP) including wildcard/directory support
 ** Supports public key and password authentication
 ** Communication parameters are passed via properties (net.ssh() object) or via URL (see below)
 ** URL: file='ssh://user:password@hostname:port//path/file.ext'
 *** Only hostname and filepath are mandatory
 **** e.g. file='ssh://hostname//path/file.ext'
 *** Host and remote file path are separated by a slash
 *** Absolute paths require another slash (i.e. // after the hostname)
 *** The username defaults to the local username if not specified
 *** Password authentication is attempted if a password is specified
 *** Public key authentication uses the key pair in ~/.ssh/ by default
 *** Replacements can be used in the URL
 **** e.g. file='ssh://<cuser>@hostname//myfile.txt (<cuser> is replaced with lower case local user id)
 ** Record-oriented datasets are written remotely like the record I/O works on Windows and Unix systems
 ** Currently FLAM4FILEs are not supported (special user I/O required, will be supported later)
 ** Static allocations (DD:NAME) are not supported with remote access
 ** Most other kinds of files (log, info, report, ...) are supported via SSH
 ** Configuration, property, trace and inverse command files must be local
 ** See the documentation for the net.ssh object for more details
 * New NoMkDir parameter to prevent automatic directory creation on write
 * Add PGP key ring support (software implementation of RFC4880)
 ** Supports all symmetric and asymmetric algorithms available with OpenSSL (libcrypto)
 ** Key ring files are compatible to GnuPG and can be used by both solutions
 ** Extended PKCS#11 implementation which works like the software key ring solution
 ** Extended new CCA/ICSF implementation which uses a PGP trust store together with the PKDS
 *** With this solution you can first migrate from GnuPG to FLAM-PGP (using the password protected key rings)
 *** Then you can import the private key store to the CCA/ICSF device for more security
 ** PGP primary and subkeys may contain the same key (can be imported with a warning, but cannot be generated)
 * Use FLAM4 system header to store file size, CCSID, binary delimiter and other parameters in the member header of a FLAM4FILE
 ** If FLUC is used to write and read a FLAM4FILE, then the CCSID, binary delimiter and file size for a member is known
 * If the input file was set to STREAM, the output file now also defaults to STREAM
 * Fix handling of multi disk values for ZIP64 files
 * Reduce the amount of ZIP64 extra fields in the central directory file header to a minimum
 * Correct large block support in FLAM4 for z/OS (required for tapes)
 ** Correction of block size smaller than 32k was damaged (works now like in the past)
 ** Correction of block sizes greater than 32k is not possible (block size must be a correct value)
 * FLCC does not add hard coded defaults to generated FLCL commands anymore
 * Improve MF-EDZ support for FLAM4 record interface (WIN/UNIX)
 ** Support usage of the FLAM record interface in EBCDIC
 * File creation and modification times are now set correctly
 * Improve Windows and UNIX install.txt with first steps after installation
 * Suppression of trailing whitespace for record format OPN-TXT is only done if SUPPAD is specified for FIO.REC()
 ** Add 0x0D (ASCII and EBCDIC) to record delimiter if record format text is used (was suppressed to date)
 ** Record format text requires well formed text delimiter (dirty delimiter are only supported with format text)
 * Improve ASCII EBCDIC separation in character set detection
 * Add block size parameter to HASH command (no longer uses hard coded value (1MiB))
 * Sort member list of a ZIP archive to ensure ascending offsets (can improve read performance)
 * Improved general I/O performance
 * Support STREAM (read from STDIN and write to STDOUT) and DUMMY files in FIO.FL4() component
 * Use STREAM as default in FLAM command if no file name given to be backwards compatible with the old FLAM4 utility
 * Allow empty parameter strings for all FLCL commands ("FLCL XCNV" == COPY "FLCL FLAM" is DECO from STDIN to STDOUT)
 * Add CCA/ICSF support on USS (use of hardware cryptography like on z/OS)
 * Support for clear key cryptography with CCAPGP and FKMECCA
 ** Use of ICSF without crypto cards (CC)
 ** A cryptographic accelerator (CA) for PGP is required
 ** Supports clear or protected DES, 3DES and AES keys with ICSF
 * Move the (CCA-specific) key label template (!FLAMPGP.%u.%t) parameter from PGP to FKM5-CCA
 * Default PGP FKM5 function for the non-mainframe world is now PGPRING (PGP key rings) instead of P11
 * Add some common use cases as examples at the beginning of the FLCL user manual
 * Add default IDENT (owner ("limes")) for logging facilities
 * Change all trace messages of FLUC to debug log messages for easier error analysis
 * Add NIST self test to crypto kernel
 ** Runs a self test against test vectors at initialization
 ** Ensures that all assigned algorithms work correctly
 * Fix damaged ZIP files with offsets greater then 4 GB on Windows
 * Support "..." or '...' in subsystem allocation parameter (required for LOGR)
 * Fix reading of encrypted FLAMFILEs via directory walk
 ** Processing of the second member emitted a wrong key error because the key value was securely erased from memory too early
 ** The password or FKME parameter are now only set once per FLAMFILE and not for each member
 ** Set secure info parameter to member by default if directory walk or member access used
 * Windows context menus are now working properly on all supported windows versions
 * Add usage reporting to a log stream for z/OS
 ** The usage reporting can be used to determine cost savings using ZEDC, ZIIP or other co-processors with FLAM
 ** This feature was implemented for all customers using our programming interfaces to determine the CPU usage for each FLAM component
 ** See install.txt for z/OS for more information how to configure and evaluate the log stream
 ** Add new log type USAGE which activates writing of usage log entries also to the normal log (SYSOUT)
 * Add new set of environment variables (FL_DEFAULT_PGPRNG/P11/CCAPARA) to define the default FKM5 PGP parameter
 * Correct OpenPGP S2K method if hash is smaller than needed key and you have to calculate second hash
 * Support system variables for environment variable LANG and ENVID on z/OS (see install.txt)
 * Support system variable to control usage of ZEDC in FLAM4 for MODE=ADC (see install.txt)
 * Correct AMODE and RMODE in FLMDIR (fix segmentation fault (0C4) in build 15352)
 ** Default values of linkage editor for AMODE and RMODE are different between z/OS 1.13 and 2.2
 * Correct whitespace handling in string converter for numbers
 * Correct wrong relative time entries over the command line




- 0000823: [b. Packaging] JAR file for the java byte interface and stream classes are missing in FLAM packages (Tilo Eckert) - resolved.
- 0000822: [1.1 FLCL] Add support for system variables on z/OS (Falk Reichbott) - resolved.
- 0000826: [1.2 FLCC] Prevent RACF and LOGR messages if no log stream for usage logging defined (Rolf-Dieter Euler) - resolved.
- 0000811: [4. Element, Byte, Record or other API] Support of SMF record type 89 for FLAM components (Rolf-Dieter Euler) - resolved.
- 0000742: [2.2 Subprogram FLUC (CONV)] Support of PGP key rings in FLAM (Mykhailo Moldavskyy) - resolved.
- 0000746: [2.2 Subprogram FLUC (CONV)] Support all asymmetric algorithm of RFC4880 with PKCS#11 (Mykhailo Moldavskyy) - resolved.
- 0000740: [2.2 Subprogram FLUC (CONV)] Support all specified symmetric algorithmns of RFC4880 (OpenPGP) (Mykhailo Moldavskyy) - resolved.
- 0000821: [2.2 Subprogram FLUC (CONV)] Support DUMMY at read and write of FLAMFILEs on UNIX and WINDOWS (Ulrich Schwab) - resolved.
- 0000819: [1.1 FLCL] Support STREAMing for FLAMFILEs in FLCL (Falk Reichbott) - resolved.
- 0000658: [2.2 Subprogram FLUC (CONV)] Write converted data of FLUC direct with SSH to remote system (Tilo Eckert) - resolved.
- 0000134: [2.2 Subprogram FLUC (CONV)] Use FLAM4 system header for normal FL5-IO (Falk Reichbott) - resolved.

[11 issues]


Copyright © 2000 - 2024 MantisBT Team
Powered by Mantis Bugtracker