<Q>CA certificate during Setting up the CI Pipeline Agent on IBM Z as a Started Task about dbb HOT 3 OPEN

Hi Dirk,

your question is kind of indirectly related to the sample scripts of DBB, which are managed in this repo. But it is also relevant to other users! So, let's see if we can sort it out here.

Both utils curl and git are used from the rocket ported tools. There is an environment variable for git which is called GIT_SSL_CAINFO . You find instructions to setup the certificate store in the release notes of Rocket Git 2.14.4 and 2.26.2. For curl you also have a -cacert / -capath parameter to point to the certificates.

For your last questions, I would recommend the RocketSoftware Community. I just found a forum entry at rocket, which also discussed the RACF certs:
https://archiveforum.rocketsoftware.com/t/curl-certificate-question/312

from dbb.

Hi Dennis,

Thanks for you reaction, I also thought this was relevant for users on this forum.

The engineers in our company prefer a solution linked to RACF (no duplication of certificates)
They wondered if there were plans in the near future. If yes we would wait for that integration and keep workaround for a little while
Workaround solution still has to go through assessment and approval the possible risk via internal security board (possible future integration is useful input )

I will add a remark/question on Rocket forum to check if they have any plans of making this possible.

from dbb.

I have a reaction on my question regarding usage RACF certificates on Rocket forum link Rocket Forum entry

Your request does make sense and I will add it to our backlog. However, our backlog does get prioritized with an eye towards our customers that are paying support and their priorities. If this is really important to your business needs I would recommend getting on support. See https://www.rocketsoftware.com/openappdev-for-z
Regards,
Peter Fandel
Rocket Software

from dbb.