MQSeries.net :: View topic - WMB and WebService - Mutual Authentication over SSL

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » WMB and WebService - Mutual Authentication over SSL

WMB and WebService - Mutual Authentication over SSL

« View previous topic :: View next topic »

Author

Message

jayasai

Posted: Mon Jul 10, 2006 10:19 am Post subject: WMB and WebService - Mutual Authentication over SSL

Newbie

Joined: 10 Jul 2006
Posts: 3

Does WMBv6.0.1 support the mutual authentication using Digital Certificates and SSL?

Here is what I am looking for:

HttpRequest -> WebService

WMB should push the Digital Certificate to get authenticated by the server. Can WMB do it?

Right now I configured WMB to authenticate the server identity by importing its certificate into WMB truststore.

Thanks
Sai
_________________
IBM WPS/WBI Middleware Consultant

jefflowrey

Posted: Mon Jul 10, 2006 2:31 pm Post subject:

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

http://publib.boulder.ibm.com/infocenter/wmbhelp/v6r0m0/index.jsp?topic=/com.ibm.etools.mft.doc/ap12235_.htm
_________________
I am *not* the model of the modern major general.

jayasai

Posted: Mon Jul 10, 2006 5:19 pm Post subject:

Newbie

Joined: 10 Jul 2006
Posts: 3

Thanks the response.

I used the specified URL to configure the HttpRequest node to communicate over SSL.

But what I am looking for is an extension to it, where in WMB on behalf of HttpRequest node should push the Digital Certificate to the WebService Provider (i.e WAS) as part of Client-Server mutual Authentication.

Thanks
Sai
_________________
IBM WPS/WBI Middleware Consultant

jefflowrey

Posted: Tue Jul 11, 2006 2:34 am Post subject:

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

I haven't heard of it being done. That doesn't mean it can't be done.

You could certainly configure a proxy server and have it handle the mutual authentication - and in my opinion you should configure a proxy server. Broker should sit fairly deep in the corporate network, and not sit in the DMZ or act like it's in the DMZ.

Otherwise, you can open a PMR and ask for specific instructions on configuring this or spend a good bit more time digging through the Info Center and the properties of the HTTPRequest node.
_________________
I am *not* the model of the modern major general.

jayasai

Posted: Tue Jul 11, 2006 6:13 am Post subject:

Newbie

Joined: 10 Jul 2006
Posts: 3

Thanks Jeff for the response. I also feel setting the Proxy Server would be the right direction for this.

Thanks
Sai
_________________
IBM WPS/WBI Middleware Consultant

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » WMB and WebService - Mutual Authentication over SSL

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP