Author |
Message
|
Melissa08 |
Posted: Mon Nov 26, 2007 8:41 am Post subject: Securing communication between WSRR and Message Broker |
|
|
Newbie
Joined: 26 Nov 2007 Posts: 5
|
Hello,
We are using SupportPac ia9q together with WMB V6.0. My customer wants to set up HTTPS between the broker and WSRR. Anyone how has done this before? The Supportpac documentation doesn't help much.
WSRR application reside on a different machine than the Message Broker. We are running on Sun Solaris.
Any suggestions are mostly appreciated. |
|
Back to top |
|
 |
mqmatt |
Posted: Mon Nov 26, 2007 9:24 am Post subject: |
|
|
 Grand Master
Joined: 04 Aug 2004 Posts: 1213 Location: Hursley, UK
|
|
Back to top |
|
 |
Melissa08 |
Posted: Tue Nov 27, 2007 11:18 pm Post subject: |
|
|
Newbie
Joined: 26 Nov 2007 Posts: 5
|
|
Back to top |
|
 |
mqmatt |
Posted: Wed Nov 28, 2007 3:24 am Post subject: |
|
|
 Grand Master
Joined: 04 Aug 2004 Posts: 1213 Location: Hursley, UK
|
SSL capability is built into the HTTPRequest node, and is completely separate to the SRRetrieveITService and SRRetrieveEntity nodes in IA9Q.
Someone may know some tricks to enable SSL in the supportpac nodes, although seeing as SSL support was specifically implemented for the equivalent nodes in 6.1, it seems unlikely. |
|
Back to top |
|
 |
Melissa08 |
Posted: Wed Nov 28, 2007 7:36 am Post subject: |
|
|
Newbie
Joined: 26 Nov 2007 Posts: 5
|
Hi Matt,
They are not using the nodes at the moment, they are using the WSRR api via JAVA node in Message Broker. Does this mean that we can use the same approach as below suggestions in the info-center? Change the wsrr.properties file to point to a HTTPS URL and then point to a WSRR certificate in the broker keystore? My problem is that I have no idea how to import the WSRR certificate and tell the broker to trust it. The SSL configuraiton in wsrr.properties is pointing by default to an AppServer directory. The WSRR and MB are not installed on the same server.
Any ideas or suggestions?
Thank you! |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Nov 28, 2007 9:32 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
Melissa08 wrote: |
They are not using the nodes at the moment, they are using the WSRR api via JAVA node in Message Broker. |
Then, they might as well just implement their own SSL or HTTPS handler.
If they are intent on reinventing wheels, that is. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
|