| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Multiple certificates for SOAP requests |
« View previous topic :: View next topic » |
| Author |
Message
|
| janglestrategies |
 Posted: Mon Mar 30, 2009 12:49 am Post subject: Multiple certificates for SOAP requests |
 |
|
Newbie
Joined: 08 Aug 2008
Posts: 6
|
Hi
Hope you can help me with what is probably a daft question and I have just missed the obvious!
We have several SOAP nodes that are SSL enabled. One of them is for external traffic so requires a Verisign certificate which I have installed and works fine.
We also have some SOAP nodes that are used internally within our company so only require a self signed cert. However, when I install 2 certs in the broker keystore I only ever get the first cert served no matter which SOAP node I am connecting to so it looks like I am only ever going to be able to have a single cert installed.
Is this correct or am I missing something?
Many thanks
John |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Mon Mar 30, 2009 3:35 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
You can only use one single cert to identify a given Broker. This is a known limitation, but you can open a requirement with Broker Development - ask your IBM Sales rep for the form.
So in your case, you will need to create more than one Broker. One that makes SOAP calls identifying itself using the self-signed cert and one that makes SOAP calls identifying itself using the Verisign cert. |
|
| Back to top |
|
|
| mgk |
| Posted: Mon Mar 30, 2009 4:30 am Post subject: |
|
|
Padawan
Joined: 31 Jul 2003
Posts: 1642
|
In WMB 6.1 for the SOAP/HTTP/WSRR Nodes you do not need to use multiple brokers; instead you can use multiple ExecutionGroups, and set the keystore to be different for each using mqsichangeproperties.
Regards,
_________________
MGK
The postings I make on this site are my own and don't necessarily represent IBM's positions, strategies or opinions. |
|
| Back to top |
|
|
| janglestrategies |
| Posted: Tue Mar 31, 2009 12:02 am Post subject: |
|
|
Newbie
Joined: 08 Aug 2008
Posts: 6
|
Thanks very much guys. Your quick replies are much appreciated.
I will just set up a couple of exec groups, one for internal traffic and one for external.
Thanks once again |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
