<div dir="ltr">I'll just note that I have setup several Envisionware instances to use stunnel and encrypt the SIP2 communication back to Evergreen as Jason Boyer describes with no issues. It's transparent to the clients as you would expect.<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><span style="background-color:rgb(255,255,255)"><font color="#000000" size="1"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><br></p></font></span></div></div></div></div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jan 5, 2021 at 9:42 AM Jason Boyer <<a href="mailto:jboyer@equinoxinitiative.org">jboyer@equinoxinitiative.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">Hi Wendell, there isn’t really anything that can be done to SIP2 to make it secure without making it not-SIP2. That said, what can be done is to transfer it over an encrypted channel. I know some Evergreen and Koha systems handle SIP2 this way and I suspect TLC is doing the same. This tunneling can be done with stunnel (an openssl TLS tunnel) or ssh port redirection and most vendors are capable of dealing with one or the other.<div><br></div><div>There’s nothing special needed in Evergreen to handle this; you just need to setup SIPServer to listen to a local IP rather than a public one and coordinate with the vendor what type of tunnel to use. I realize this is pretty non-specific but if you have any questions I or someone else on the list should be able to help out.<br><div><br></div><div>Jason</div><div>
<div><br>-- <br>Jason Boyer<br>Senior System Administrator<br>Equinox Open Library Initiative<br>phone: +1 (877) Open-ILS (673-6457)<br><a href="mailto:JBoyer@EquinoxInitiative.org" target="_blank">email: JBoyer@EquinoxInitiative.org</a><br>web: <a href="https://EquinoxInitiative.org/" target="_blank">https://EquinoxInitiative.org/</a></div>
</div>
<div><br><blockquote type="cite"><div>On Jan 5, 2021, at 9:05 AM, Gragg, Wendell E <<a href="mailto:WGragg@bryantx.gov" target="_blank">WGragg@bryantx.gov</a>> wrote:</div><br><div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Hi all. I haven’t posted in a while, but we are still in the process of evaluating ILS systems and our city IT department is balking at one thing, SIP2 being plain text. Apparently, one vendor, TLC claims they have an encryption solution for SIP2, but I question whether it actually works or not, and TLC is another proprietary system, which we are trying to avoid.<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><u></u> <u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">I have been trying to research SIP2 a bit more and am not finding a lot of information about security issues with it. I’m also trying to find out if anyone in the Evergreen community has worked with encrypting SIP2 messages, at least sensitive information like passwords and user barcodes.<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><u></u> <u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Is this even possible in Evergreen and has it caused any problems with outside vendors like OCLC or Envisionware?<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><u></u> <u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">I would like to find this out because I fear that our city IT is going to force us into an ILS we really don’t want.<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><u></u> <u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Thanks,<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Wendell<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><u></u> <u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Wendell Gragg, MSIS<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Automation Services Supervisor<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Bryan+College Station Public Library System<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Bryan, TX<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">979-209-5613<u></u><u></u></div><div style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><u></u> <u></u></div></div><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;float:none;display:inline">_______________________________________________</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;float:none;display:inline">Evergreen-general mailing list</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><a href="mailto:Evergreen-general@list.evergreen-ils.org" style="color:rgb(149,79,114);text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">Evergreen-general@list.evergreen-ils.org</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><a href="http://list.evergreen-ils.org/cgi-bin/mailman/listinfo/evergreen-general" style="color:rgb(149,79,114);text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">http://list.evergreen-ils.org/cgi-bin/mailman/listinfo/evergreen-general</a></div></blockquote></div><br></div></div>_______________________________________________<br>
Evergreen-general mailing list<br>
<a href="mailto:Evergreen-general@list.evergreen-ils.org" target="_blank">Evergreen-general@list.evergreen-ils.org</a><br>
<a href="http://list.evergreen-ils.org/cgi-bin/mailman/listinfo/evergreen-general" rel="noreferrer" target="_blank">http://list.evergreen-ils.org/cgi-bin/mailman/listinfo/evergreen-general</a><br>
</blockquote></div>