This is a brief description of how to use the z/OSMF API with certificate authentication, from a PHP application.
Create a certificate.For example with openSSL:
openssl req -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr
Send the certificate to a certificate authority to get it signed.
Add the signed certificate to RACF:
RACDCERT CHECKCERT(CERT)RACDCERT ADD(CERT) TRUST WITHLABEL('yourlabel-client-ssl') ID(your RACF userID) SETROPTS REFRESH RACLIST(DIGTCERT, DIGTRING)
When authentication, the userID in the ID field will be mapped to, and the z/OSMF tasks will run under this userID.
Save the signed certificate on the PHP server in a directory accessible for the PHP server.
The following PHP code will then issue a request with client certificate authentication:
curl_setopt($curl, CURLOPT_SSLCERT, '/<server>/htdocs/<somesubdir>yourdomain.csr'); curl_setopt($curl, CURLOPT_SSLCERTTYPE, 'PEM'); curl_setopt($curl, CURLOPT_VERBOSE, 1); curl_setopt($curl, CURLOPT_HTTPHEADER, array( // this is the basic auth commented out: 'authorization: Basic ' . base64_encode($this->userid . ":" . $this->password), etc for the reast of the header