ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » Which certificate to order...

Post new topic  Reply to topic
 Which certificate to order... « View previous topic :: View next topic » 
Author Message
Michael Dag
PostPosted: Fri May 14, 2010 2:57 am    Post subject: Which certificate to order... Reply with quote

Jedi Knight

Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
it's been a while since I ordered SSL certificates so now with a new customer and need to order SSL certificates from VeriSign and what do you know... they have multiple flavors apparently...

http://www.verisign.com/ssl/buy-ssl-certificates/index.html?tid=a_box

Secure Site
Secure Site Pro
Secure Site With EV
Secure Site Pro with EV

also I thought the CN= part of the distinguised name should be the queuemanager name for server to server so you can set it as SSLPEER value... CN=QmgrName

all these front end automatic ordering processing screens are now checking the CN= part to be a fully qualified domain name preceded by www. ...

that's not what I am looking for...

so two questions:

1) which certificate from VeriSign should be good enough for MQ SSL
2) where can I find these references on what should be in the CN= for MQ (I am not talking about the label which is used by the qmgr to retrieve the certificate from the keystore)
_________________
Michael



MQSystems Facebook page
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
fjb_saper
PostPosted: Fri May 14, 2010 7:26 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
These are really 2 questions...
The type of cert: see Verisign's product wizard http://www.verisign.com/ssl/buy-ssl-certificates/ssl-product-wizard/index.html
Now the next question is really about the content of the SSL request.

In truth I believe you might need a quick conversation with someone at Verisign... or submit an enquiry online https://www.verisign.com/cgi-bin/go.cgi?a=w13490307590800002

It looks like their business is streamlined towards either WebSite certs or code signing certs or certs for use with email...

Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Michael Dag
PostPosted: Fri May 14, 2010 8:33 am    Post subject: Reply with quote

Jedi Knight

Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
fjb_saper wrote:
These are really 2 questions...


isn't that what I said?

Michael Dag wrote:
so two questions:


The forms/FAQs on the VeriSign website about MQ no longer reflect what they are offering
so that's why I am asking the question here to see who ordered some certificates recently...

and it gives me the opportunity to ask a question too...
_________________
Michael



MQSystems Facebook page
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » Which certificate to order...
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
  
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.