| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
| problem with new SSL support MQ VisualEdit |
« View previous topic :: View next topic » |
| Author |
Message
|
| pdegrandmaison |
 Posted: Tue May 22, 2007 11:02 am Post subject: problem with new SSL support MQ VisualEdit |
 |
|
Newbie
Joined: 03 May 2007
Posts: 5
Location: Montreal, QC ,Canada
|
Hello,
I tried V1.4 with a client SVRCONN channel without SSL and it works fine. I tried with a client SSL channel and it doesn't work... maybe I don't set the several parameters right! I checked the documentation but doesn't provide a lot of information about it! I have no indication which of these fields are optional.
The channel param and SSL cert and keys are ok as I use them with MO71 and it works fine.
MQVisual Edit SSL params:
SSL CypherSpec name: RC4_MD5_US
Distinguished name: (is it optonal like the other tools???)
TrustStore & TrustStore password...
Is it the same as the MQSSLKEYR environnement value locating the key.kdb database? If yes, is it the full name , STEM name (like MO71) or the key directory only? I have a password in a file... do I still need the specify the password here?
KeyStore & KeyStore password...
I have the same questions listed in the TrustStore!
Certificate Revocation List LDAP: I do not have one and I never used one before.. is it mandatory field?
_________________
Pierre DeGrandmaison
IT Integration Architect
Global Business Services
IBM Canada Ltd |
|
| Back to top |
|
 |
| marcin.kasinski |
| Posted: Tue May 22, 2007 11:32 am Post subject: Re: new SSL support |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
What does it mean "it doesn't work..." ?
Any errors ?
To test simple SSL scenario you have to set store parameters and sslCipherSuite .
Example :
| Code: |
...
System.setProperty( "javax.net.ssl.keyStore", "key.jks");
System.setProperty( "javax.net.ssl.keyStorePassword", "password" );
System.setProperty( "javax.net.ssl.trustStore", "key.jks");
System.setProperty( "javax.net.ssl.trustStorePassword", "password");
MQEnvironment.sslCipherSuite = "SSL_RSA_WITH_RC4_128_MD5";
...
|
If it works try it with channel table.
Zou don't need Certificate Revocation List
_________________
Marcin |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Thu May 24, 2007 1:38 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Hi,
If you have it working in MO71 then you should be able to use the same information and have it work in MQ Visual Edit.
All of the SSL fields are optional. So only fill in those fields that you require.
| pdegrandmaison wrote: |
| Is it the same as the MQSSLKEYR environnement value locating the key.kdb database? |
Yes.
| pdegrandmaison wrote: |
| If yes, is it the full name , STEM name (like MO71) or the key directory only? |
Full path and name.
| pdegrandmaison wrote: |
| I have a password in a file... do I still need the specify the password here? |
Yes.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
