| Author |
Message
|
| rajparekh08 |
 Posted: Thu Nov 19, 2009 5:08 am Post subject: How to test HTTPS |
 |
|
Acolyte
Joined: 21 Sep 2009
Posts: 58
Location: India- Bagalore
|
Hi,
I have created a keystore file.
Imported the certs.
Configured the HTTPS listener to the keystore file along with the password.
Now how do i check it?
I have nettool and Wfetch.
In wfetch.. I have chosen the cert as the certificate which I had imported to the keystore file.
But I keep getting the error as:
No credentials are available in the security package.. Failed to acquire credentials..
And one more thing, while connecting from the tool kit, there are some SSl parameters which relate to the cipher. Do i need to change them also??
 |
|
| Back to top |
|
 |
| AkankshA |
| Posted: Thu Nov 19, 2009 7:24 pm Post subject: |
|
|
Grand Master
Joined: 12 Jan 2006
Posts: 1494
Location: Singapore
|
testing a flow which has HTTPs is being discussed on forum many many times...
Please do take advantage of the search button....
| Quote: |
while connecting from the tool kit, there are some SSl parameters which relate to the cipher. Do i need to change them also?? |
Do you mean domain connection ????
_________________
Cheers |
|
| Back to top |
|
|
| rajparekh08 |
| Posted: Thu Nov 19, 2009 8:03 pm Post subject: |
|
|
Acolyte
Joined: 21 Sep 2009
Posts: 58
Location: India- Bagalore
|
| AkankshA wrote: |
| Quote: |
while connecting from the tool kit, there are some SSl parameters which relate to the cipher. Do i need to change them also?? |
Do you mean domain connection ???? |
Yeah.. Do i need to make any changes there before connecting and deploying the flow. |
|
| Back to top |
|
|
| AkankshA |
| Posted: Thu Nov 19, 2009 8:20 pm Post subject: |
|
|
Grand Master
Joined: 12 Jan 2006
Posts: 1494
Location: Singapore
|
NO
_________________
Cheers |
|
| Back to top |
|
|
| rajparekh08 |
| Posted: Wed Nov 25, 2009 1:52 am Post subject: |
|
|
Acolyte
Joined: 21 Sep 2009
Posts: 58
Location: India- Bagalore
|
| Do I need to change any qmgr attributes like sslev;sslkeyr?? |
|
| Back to top |
|
|
| Gaya3 |
| Posted: Wed Nov 25, 2009 2:14 am Post subject: |
|
|
Jedi
Joined: 12 Sep 2006
Posts: 2493
Location: Boston, US
|
| rajparekh08 wrote: |
| Do I need to change any qmgr attributes like sslev;sslkeyr?? |
do you want to test it using some tool or using Message Flows
Through message flows you dont need to do any changes to qmgr attributes.
Import your certificate. Configure the broker and use it..
_________________
Regards
Gayathri
-----------------------------------------------
Do Something Before you Die |
|
| Back to top |
|
|
| rajparekh08 |
| Posted: Wed Nov 25, 2009 2:24 am Post subject: |
|
|
Acolyte
Joined: 21 Sep 2009
Posts: 58
Location: India- Bagalore
|
| Gaya3 wrote: |
do you want to test it using some tool or using Message Flows
Through message flows you dont need to do any changes to qmgr attributes.
Import your certificate. Configure the broker and use it.. |
Eventually it is going to be some Java application, which is going to use the service. and for me to check the service, I will use some tool like nettool or wfetch. I have followed the instructions, but when I hit on the link from a browser, I don not get the cerificate error, i get HTTP 404 error. The tool is going to hit on the HTTPInput node of a message flow, and I want it to deny the request, if it does not have the required certs. |
|
| Back to top |
|
|
| rajparekh08 |
| Posted: Wed Nov 25, 2009 3:36 am Post subject: |
|
|
Acolyte
Joined: 21 Sep 2009
Posts: 58
Location: India- Bagalore
|
One more thing,
after is issue the following command:
mqsichangeproperties brokername -b httplistener -o HTTPListener -n enableSSLConnector -v true
and try to connect using nettool o anything, i keep getting the following error:
java.net.connectException:Connection refused:connect
.
If i disable the SSLConnector, it works fine again. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Wed Nov 25, 2009 8:06 am Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Hello rajparekh08,
Sending a private message (to me) about your issue (this very subject) is extremely rude given that I have never answered any questions related to HTTPInput node.
Sending 1 or more people private message(s) regarding your problems/issues is considered SPAM and could lead to you losing your privileges at mqseries.net.
Bottom line is to post your questions in the appropriate forum.
Regards,
Roger Lacroix
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
|
|
