By default the base SSL APIs are being used. If you wish to use the GSKIT, simply change the value of the data area MLTSSL02DA to the value *GSKIT (case sensitive).
In the future the default may revert to using the GSKIT as IBM seems to not be supporting the "legacy" SSL APIs, or they simply don't want to.
As always, if you have any questions, please contact us. Thanks!