Register Application for Certificate Use Exit Program


  Required Parameter Group:

1 Register application exit information Input Char(*)
2 Register indicator Output Char(1)

  QSYSINC Member Name: ESYRGAPP

  Exit Point Name: QIBM_QSY_CERT_APPS

  Exit Point Format Name: RGAP0100

The Register Application for Certificate Use exit program is called when the registration information for an application is changed using the Register Application for Certificate Use (QSYRGAP, QsyRegisterAppForCertUse) API, the Add Exit Program (QUSADDEP, QusAddExitProgram) API, or the Add Exit Program (ADDEXITPGM) command.

When the information for a registered application is being changed, the user-written exit program associated with the registered application is called. The exit point supports an unlimited number of applications, but only one exit program for each application. (For information about registering an application that uses certificates, see the Register Application for Certificate Use (QSYRGAP, QsyRegisterAppForCertUse) API.

Note: The Register Application For Certificate Use exit point does not change the application information if the user-written exit program indicates that the change operation is not allowed. If the exit program does not exist or cannot be called because of the multithreaded job action value, then the application information is changed.


Authorities and Locks

Authority to Exit Program Library
*EXECUTE

Authority to Exit Program
*USE

Required Parameter

Register application exit information
INPUT; CHAR(*)

Information needed by the exit program for notification of any changes to a registered application. For details, see Format of Register Application Exit Information.

Register indicator
OUTPUT; CHAR(1)

An indicator set by the exit program as to whether the change of the application information is allowed. The possible values follow:

0 The application information will not be changed.
1 The application information will be changed.

Format of Register Application Exit Information

The following table shows the structure of the register application information for format RGAP0100. For a description of the fields in this format, see "Field Descriptions".

Offset Type Field
Dec Hex
0 0 CHAR(20) Exit point name
20 14 CHAR(8) Exit point format name
28 1C CHAR(100) Application ID
128 80 CHAR(1) Current client authentication required value
129 81 CHAR(1) New client authentication required value
130 82 CHAR(1) Current client authentication supported value
131 83 CHAR(1) New client authentication supported value
132 84 CHAR(1) Current limit CA certificates trusted value
133 85 CHAR(1) New limit CA certificates trusted value


Field Descriptions

Application ID.

The ID of the application.

Current client authentication required value. The current value for the client authentication required indicator. The possible values follow:

0 Client authentication is not required.
1 Client authentication is required.

Current client authentication supported value. The current value for the client authentication supported indicator. The possible values follow:

0 Client authentication is not supported by this application.
1 Client authentication is supported by this application.

Current limit CA certificates trusted value. The current value for the limit Certificate Authority (CA) certificates trusted indicator. The possible values follow:

0 Application trusts all CA certificates that are trusted in the *SYSTEM certificate store.
1 Application trusts a subset of the CA certificates that are trusted in the *SYSTEM certificate store.

Exit point format name. The format name for the Register Application for Certificate Use exit program. The possible format name is:

RGAP0100 The format name that is used after application information is changed.

Exit point name. The name of the exit point that calls the exit program.

New client authentication required value. The new value for the client authentication required indicator. The possible values follow:

0 Client authentication is not required.
1 Client authentication is required.

New client authentication supported value. The new value for the client authentication supported indicator. The possible values follow:

0 Client authentication is not supported by this application.
1 Client authentication is supported by this application.

New limit CA certificates trusted value. The new value for the limit Certificate Authority (CA) certificates trusted indicator. The possible values follow:

0 Application trusts all CA certificates that are trusted in the *SYSTEM certificate store. If the current limit CA certificates trusted value is 1, then any CA certificates that are in the list of trusted CA certificates for the application will be removed.
1 Application trusts a subset of the CA certificates that are trusted in the *SYSTEM certificate store. If the current limit CA certificates trusted value is 0, then the application will not trust any of the CA certificates that are trusted in the *SYSTEM certificate store until they are added to the list of trusted CA certificates for the application using Digital Certificate Manager (DCM).

Note: The Update Certificate Authority (CA) Trust exit program will not be called for the CA certificates that are removed from the list of trusted CA certificates for the application because of a change to this value.



Exit program introduced: V5R1
Top | Security APIs | APIs by category