| Author |
Message
|
| 9A5YY |
 Posted: Thu Jun 05, 2008 4:54 am Post subject: SSL and Websphere MQ Cluster |
 |
|
Voyager
Joined: 27 Sep 2005
Posts: 99
Location: Croatia
|
| Is it possible to use cluster channels in the Websphere MQ cluster in two ways with SSL and without SSL? In the other words I would like that Windows queue managers communicate with z/OS repository managers using SSL and non-SSL cluster channels. One group of Windows queue managers would use SSL cluster channels and an other non-SSL cluster channels. Can I use cluster receiver channel on z/OS repository for SSL and non-SSL connections? There is a only one cluster receiver channel on the z/OS repository queue manager. Thanks for help! |
|
| Back to top |
|
 |
| exerk |
| Posted: Thu Jun 05, 2008 6:02 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Create a second cluster, with separate CLUSSDR and CLUSRCVR for that cluster in each of the queue managers. You cannot use the same CLUSRCVR for both SSL and non-SSL traffic.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Jun 05, 2008 6:06 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
What is SSLCAUTH?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| exerk |
| Posted: Thu Jun 05, 2008 6:13 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| jefflowrey wrote: |
| What is SSLCAUTH? |
Erm...SSL authentication of Client channels?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| HubertKleinmanns |
| Posted: Thu Jun 12, 2008 11:07 pm Post subject: |
|
|
Shaman
Joined: 24 Feb 2004
Posts: 732
Location: Germany
|
| jefflowrey wrote: |
| What is SSLCAUTH? |
Jeff,
I am not sure, if I understand your question above  .
SSLCAUTH controls, if a client authentication is required or optional. Client in this case means a QMgr, that initiates the SSL communication - not MQ client connection.
The client from the SSL point of view is always the initiation (calling) end of a message channel.
But I am pretty sure, that you know this  .
_________________
Regards
Hubert |
|
| Back to top |
|
|
| ranganathan |
| Posted: Wed Jul 16, 2008 7:34 am Post subject: |
|
|
Centurion
Joined: 03 Jul 2008
Posts: 104
|
SSLCAUTH - is whether the client (in SSL terminology) has to authenticate using a certificate. If YES then the client will be able to communicate only if the client has a certificate (self signed will work... if it is local) Correct me if im wrong.
Please refer the book Security in MQ for more info.  |
|
| Back to top |
|
|
|
|
