ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Working with the Secure Sockets Layer (SSL) on unix Systems

Post new topic  Reply to topic
 Working with the Secure Sockets Layer (SSL) on unix Systems « View previous topic :: View next topic » 
Author Message
venkataramanan
PostPosted: Sun May 14, 2006 11:24 pm    Post subject: Working with the Secure Sockets Layer (SSL) on unix Systems Reply with quote

Apprentice

Joined: 18 Sep 2002
Posts: 47
Location: Chennai, India

Dear Gurus,

Iam trying to implement SSL on unix systems. Actually the implementations is like that iam communicating from the Windows MQ client PC to the MQserver running on the IBM AIX unix

Earlier we were using some third party software called E-token to decrypt the messages when sending to the MQserver running in IBM AIX unix from the MQ client running in the windows 2000. Now we have planned to use SSL provided by MQseries 5.3. The CSD is 9.

I had configured the ssl settings on the client oc running in the wndows 2000.

I need to download some demo certificates of unix version & configuration guide to implement the same in the AIX systems.

Please let me know the procedures if any or provide me with the web link.

Thank you

Venkat
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
mvic
PostPosted: Mon May 15, 2006 1:38 am    Post subject: Re: Working with the Secure Sockets Layer (SSL) on unix Syst Reply with quote

Jedi

Joined: 09 Mar 2004
Posts: 2080

venkataramanan wrote:
Now we have planned to use SSL provided by MQseries 5.3. The CSD is 9.

It is very wise to use the latest available levels of everything, especially for a new project. CSD12 is the latest maintenance for MQ 5.3. But even better would be if you could upgrade to MQ 6.0.

Quote:
I need to download some demo certificates of unix version & configuration guide to implement the same in the AIX systems.

Please let me know the procedures if any or provide me with the web link.

There is lots of documentation in the WebSphere MQ Security manual ( see http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/topic/com.ibm.mq.csqzas.doc/csqzas03.htm ). Also, maybe this HOWTO will help: http://www.ibm.com/support/docview.wss?rs=171&uid=swg21233897 (NB. it's written for MQ v6 on Windows but similar principles apply on MQ v5.3 and non-Windows platforms).
Back to top
View user's profile Send private message
wschutz
PostPosted: Mon May 15, 2006 2:14 am    Post subject: Reply with quote

Jedi Knight

Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)

The documentation details the creation of self signied certificates. However, becuase the way you manage certs has changed on Windows between v5. and v6, you should use the document which matches your mq version (and yes, please do apply a recent csd like 11 or 12).

For v6:
http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/index.jsp?topic=/com.ibm.mq.csqzas.doc/c00stsu0.htm

For v5.3:
http://www.elink.ibmlink.ibm.com/public/applications/publications/cgibin/pbi.cgi?CTY=US&FNC=SRX&PBL=SC34-6079-01
_________________
-wayne
Back to top
View user's profile Send private message Send e-mail AIM Address
venkataramanan
PostPosted: Sun May 21, 2006 10:01 pm    Post subject: Assigning multiple certificates to single Queue Manager Reply with quote

Apprentice

Joined: 18 Sep 2002
Posts: 47
Location: Chennai, India

Dear Gurus,

Well Certificates Part worked out for me. But iam facing some other issue. Iam not allowed to assign multiple certificates to my Single Queue Manager. Well my requirement is 2 certificates to single queue manager. Iam allowed to choose only one certificate from the POP UP window.

Any other ways to do?

Venkat
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Working with the Secure Sockets Layer (SSL) on unix Systems
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.