| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Configuring SSL for SOAPInput and SoapRequest nodes |
« View previous topic :: View next topic » |
| Author |
Message
|
| Vitor |
 Posted: Wed Sep 10, 2014 8:25 am Post subject: Configuring SSL for SOAPInput and SoapRequest nodes |
 |
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
IIBv9.0.0.2 on AIX
We have this set up and running (albeit with only a few brave development teams) and life is good.
Or was. We just got reported by our internal security people for having insecure connections.
For all our web traffic we have things set up as described in the InfoCenter; people wiith valid certificates are connected, people with no certificates (or the wrong ones) are not. This is apparently not enough; there's a previously unknown internal standard that all traffic must be encrypted using only high security ciper suites.
Looking here, it says that IIB can use any of the suites listed here which is cool, but I can't find anywhere you can configure it not to use one. Basicially I'm looking for the SOAP node equivalent of the SSLCIPH attribute on a channel.
Links or advice welcomed.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
 |
| Vitor |
| Posted: Wed Sep 10, 2014 8:26 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
It's worth mentioning that all of the IIB is inside the organization, with mighty walls of DataPower and web servers between us and nefarious forces, so I'm not entirely convinced this is a serious and immediate vunerability.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Sep 10, 2014 8:34 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Sep 10, 2014 8:37 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
I love the new InfoCenter 
If you're going to be at MQTCv2.0.1.4, the drinks are on me.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
