I had clearly configured http on z/OS, as when it started it printed Colins startup, but I could not find where this was being executed from.
I eventually found it was in the home directory for httpd. My http server starts with PARM=’SH /usr/lpp/ihsa_zos/bin/apachectl…’. In /usr/lpp/ihsa_zos/bin/envvars are the magic startup parameters, including some gsktrace settings.
I have
#!/bin/sh . /usr/lpp/ihsa_zos/bin/cleanup.sh IHS=/usr/lpp/ihsa_zos LIBPATH=$IHS/lib:$IHS/modules:$IHS PATH=$IHS/bin _EDC_ADD_ERRNO2=1 _BPX_SHAREAS=NO _BPX_BATCH_SPAWN=YES GSK_SSL_HW_DETECT_MESSAGE=1 LC_ALL=En_US.IBM-1047 #rm /u/mqweb3/conf/*.log export GSK_TRACE=0x00 export GSK_TRACE=0xff export GSK_TRACE_FILE=/u/mqweb3/conf/httpd.gsktrace #xport GSK_SERVER_TLS_KEY_SHARES=00300029002500240023 #export GSK_TLS_SIG_ALG_PAIRS=0601050104010301080608050804050304030603 #export GSK_TLS_CERT_SIG_ALG_PAIRS=0601050104010301080608050804050304030603 f
and /usr/lpp/ihsa_zos/bin/cleanup.sh has
#!/bin/sh # echo 'colins cleanup' rm /u/mqweb3/conf/*.log rm /u/mqweb3/conf/httpd.gsktrace
It is always easy when you know the answer.
Putting the GSK_TRACE information in this file is not recommended as it will trace every system SSL call, and to turn it off, you have to stop http, edit the file to say GSK_TRACE=0x00 and restart the server. This article describes how to collect a trace using CTRACE. You can turn trace on and off without restarting the HTTP server.
To format this gsk trace I had to use the following command in Unix Services
gsktrace /u/mqweb3/conf/httpd.gsktrace > gsktrace.txt
ColinPaice 