| Author |
Message |
 Topic: SSL Certificate Serial Number |
PC_Middleware_1
Replies: 16
Views: 17085
|
 Forum: IBM MQ Installation/Configuration Support Posted: Wed Jun 22, 2011 4:09 am Subject: SSL Certificate Serial Number |
EXERK wrote
endmqm; strmqm;
Do you mean "you can't use refresh security type SSL" and the only way to implement a new queue managers certificate is to stop/start MQ?
Misquote; that was ... |
| Topic: SSL Certificate Serial Number |
PC_Middleware_1
Replies: 16
Views: 17085
|
Forum: IBM MQ Installation/Configuration Support Posted: Wed Jun 22, 2011 3:37 am Subject: SSL Certificate Serial Number |
EXERK wrote
endmqm; strmqm;
Do you mean "you can't use refresh security type SSL" and the only way to implement a new queue managers certificate is to stop/start MQ? |
| Topic: SSL Certificate Serial Number |
PC_Middleware_1
Replies: 16
Views: 17085
|
Forum: IBM MQ Installation/Configuration Support Posted: Tue Jun 21, 2011 5:21 am Subject: SSL Certificate Serial Number |
Yes, and that's exactly what happened. We neither believe in magic, that's why we want to check it  .
Since it was our first negative expirience with an all in all failed security refresh, we ho ... |
| Topic: SSL Certificate Serial Number |
PC_Middleware_1
Replies: 16
Views: 17085
|
Forum: IBM MQ Installation/Configuration Support Posted: Tue Jun 21, 2011 5:04 am Subject: SSL Certificate Serial Number |
MQJEFF wrote
A cert is 'active' in MQ when it is placed into a given keystore, and inactive otherwise.
I think I must disagree on that. Placing a certificate into the keystore doesn't automatic ... |
| Topic: SSL Certificate Serial Number |
PC_Middleware_1
Replies: 16
Views: 17085
|
Forum: IBM MQ Installation/Configuration Support Posted: Tue Jun 21, 2011 4:24 am Subject: SSL Certificate Serial Number |
| Because in the keystore the current certificate is placed. However in the security cache an old e.g. expired certificate might be still active, as we unfortunatly experienced as a result on an "f ... |
| Topic: SSL Certificate Serial Number |
PC_Middleware_1
Replies: 16
Views: 17085
|
Forum: IBM MQ Installation/Configuration Support Posted: Tue Jun 21, 2011 2:22 am Subject: SSL Certificate Serial Number |
| How can you identify the SSL Certificate Serial Number on a (sender) channel? On default the channelstatus gives you information off SSL Peer Name (equals Certificate Subject) and eventualy SSL Issers ... |
