| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| How Do We Configure Hermes JMS to use SSL for Websphere MQ |
« View previous topic :: View next topic » |
| Author |
Message
|
| EricCox |
 Posted: Tue Aug 13, 2013 10:42 am Post subject: How Do We Configure Hermes JMS to use SSL for Websphere MQ |
 |
|
Master
Joined: 08 Apr 2011
Posts: 292
|
To all,
We have SSL protection on our MQ connections.
Does anyone have an instruction/link to instruction or help on how to get Hermes JMS working with SSL so I can use SOAP UI to test MQ services.
I have Hermes working correctly with Websphere MQ without SSL.
I have x.JKS and x.KDB files.
Thanks a bunch as always,
EMC |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Wed Aug 14, 2013 5:30 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Hi Eric,
If you are using SOAPUI you need to make sure you added the correct *.jks file to the soap configuration. Then check on your connection factory setup whether you added all the relevant fields and values for SSL (like SSL Cipher Suite and such... FIPS...).
This should then allow you to create an SSL enabled connection.
If I might suggest: Create 2 Hermes setup entries. One without SSL and one with SSL. So you know you just need to add the SSL info to the one working without SSL.
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| EricCox |
| Posted: Wed Aug 14, 2013 6:48 am Post subject: Hermes SslCipherSuite |
|
|
Master
Joined: 08 Apr 2011
Posts: 292
|
Hi FJ,
I hope all is well.
Do I need to configure SOAP UI and Hermes for SSL if I'm trying to connect to SSL protected MQ?
There is a field in the Hermes Connection Factory for MQ which is called SslCipherSuite. How do I set that field correctly? Do I need to configure more than the SslCipherSuite to reach SSL protected MQ 7.5?
Thanks FJ |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Aug 14, 2013 7:11 am Post subject: Re: Hermes SslCipherSuite |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| EricCox wrote: |
Hi FJ,
I hope all is well.
Do I need to configure SOAP UI and Hermes for SSL if I'm trying to connect to SSL protected MQ?
There is a field in the Hermes Connection Factory for MQ which is called SslCipherSuite. How do I set that field correctly? Do I need to configure more than the SslCipherSuite to reach SSL protected MQ 7.5?
Thanks FJ |
You need to make sure SOAP UI / HERMES has access to the jks keystore/truststore. You need to specify following features on the qcf:
- SSLCipherSuite
- SSLFipsRequired
- SSLPeerName
For the SSLCipherSuite and SSLFipsRequired check out the table in
http://pic.dhe.ibm.com/infocenter/wmqv7/v7r5/topic/com.ibm.mq.dev.doc/q032470_.htm
Have fun
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
