|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
Just a Quick one on SSL implementation in MQ |
« View previous topic :: View next topic » |
Author |
Message
|
sidharth_bora |
Posted: Sun Mar 02, 2008 8:10 pm Post subject: Just a Quick one on SSL implementation in MQ |
|
|
 Voyager
Joined: 24 Nov 2005 Posts: 87
|
Hi, Guys,
Just a quick help from you MQ gurus -
I have configured SSL on QM A and QM B on different hosts(test env). Since the flow is both ways, the sender/receiver of both QM A and QM B is configured for SSL and is running fine.
Now my question, is whether it will affect any other sender/receiver channel on the QM's, in simple words,
1. what will happen to the other SENDER/RCVR channel pairs in the QM A and QM B. I have just configured only one pair w.r.t one application
2. Can I define new SENDER/RCVR pair on QM A and QM B with out SSL enabled
thanks
Sid |
|
Back to top |
|
 |
AkankshA |
Posted: Sun Mar 02, 2008 8:27 pm Post subject: Re: Just a Quick one on SSL implementation in MQ |
|
|
 Grand Master
Joined: 12 Jan 2006 Posts: 1494 Location: Singapore
|
sidharth_bora wrote: |
1. what will happen to the other SENDER/RCVR channel pairs in the QM A and QM B. I have just configured only one pair w.r.t one application
|
Nothing ll happen..
sidharth_bora wrote: |
2. Can I define new SENDER/RCVR pair on QM A and QM B with out SSL enabled
|
Yes why not...
Sid,
You made a post to the wrong forum... MQ support forums would have been a better choice...
Moderators : please move the post to the correct forum  _________________ Cheers |
|
Back to top |
|
 |
sidharth_bora |
Posted: Sun Mar 02, 2008 8:33 pm Post subject: |
|
|
 Voyager
Joined: 24 Nov 2005 Posts: 87
|
Hi AkankshA,
thanks a lot for the quick answer and clarification. & sorry for putting it in worng post place. Hi Moderator, please help.
thanks
Sid |
|
Back to top |
|
 |
BBM |
Posted: Wed Mar 12, 2008 3:31 am Post subject: |
|
|
Master
Joined: 10 Nov 2005 Posts: 217 Location: London, UK
|
Hi,
SSL needs to be enabled on a per channel basis - you have to explicity set a channel to use a SSL cipherspec - by default SSL is off.
In other words a newly created channel pair would not have SSL enabled unless you had specifically done so, despite the queue manager(s) being SSL enabled.
regds
BBM |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Mar 12, 2008 3:43 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
BBM wrote: |
In other words a newly created channel pair would not have SSL enabled unless you had specifically done so, despite the queue manager(s) being SSL enabled. |
This is always a good reason for updating the system default objects... to ensure that nobody does the wrong thing even if they forget to script the right thing...
On the other hand, never ever ever ever set DEFPSIST(YES) on SYSTEM.DEFAULT.MODEL.QUEUE or SYSTEM.ADMIN.COMMAND.QUEUE. This is bad. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|