| Author |
Message
|
| J.D |
 Posted: Thu Jun 10, 2010 3:02 pm Post subject: Exit to decrypt the data |
 |
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
Our Client is looking at various options to encrypt the data and asked me the whether below approach is possible by using MQ exit.
App A (Sends Encrypt Data) ---> Qmgr 1 ---> Qmgr 2 ----> App B (Receives decrypted data from Qmgr 2)
Here the data should be decrypted at Qmgr 2 before App B receives it. I know MQ exits work in pairs but just want to confirm with you guys. |
|
| Back to top |
|
 |
| fatherjack |
| Posted: Thu Jun 10, 2010 3:08 pm Post subject: Re: Exit to decrypt the data |
|
|
Knight
Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island
|
| J.D wrote: |
| App A (Sends Encrypt Data) ---> Qmgr 1 |
Are you saying that App A does the encryption before putting the message at Qmgr 1?
_________________
Never let the facts get in the way of a good theory. |
|
| Back to top |
|
|
| J.D |
| Posted: Thu Jun 10, 2010 3:12 pm Post subject: |
|
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
| Yes, App A encrypts the data before sending it to Qmgr 1. |
|
| Back to top |
|
|
| fatherjack |
| Posted: Thu Jun 10, 2010 3:20 pm Post subject: |
|
|
Knight
Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island
|
| J.D wrote: |
| Yes, App A encrypts the data before sending it to Qmgr 1. |
But you want Qmgr 2, by way of an exit to decrypt?
I'm sure it can be done but for me, architecturally it doesn't fit. Either leave encryption / decryption to MQ and do it Qmgr to Qmgr or leave it to your apps so App B would do the encryption. Why mix it ?
_________________
Never let the facts get in the way of a good theory. |
|
| Back to top |
|
|
| fatherjack |
| Posted: Thu Jun 10, 2010 3:27 pm Post subject: |
|
|
Knight
Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island
|
[quote="fatherjack"]
| J.D wrote: |
| so App B would do the encryption. |
I meant decryption, obviously. 
_________________
Never let the facts get in the way of a good theory. |
|
| Back to top |
|
|
| J.D |
| Posted: Thu Jun 10, 2010 3:57 pm Post subject: |
|
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
Our long term approach is to have front end app to encrypt and backend app to decrypt but due to some time constraints it's not possible for backend app to change their functionality.
Can you tell me how this can be achieved?
Thank You!! |
|
| Back to top |
|
|
| fatherjack |
| Posted: Thu Jun 10, 2010 4:18 pm Post subject: |
|
|
Knight
Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island
|
| J.D wrote: |
| Can you tell me how this can be achieved? |
Don't implement the App A encryption until App B decryption is ready. In the meantime use MQ's facilities.
_________________
Never let the facts get in the way of a good theory. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Jun 10, 2010 7:22 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
Alternatively add an application that does nothing but pickup the message, decrypt it and make it ready for the destination application to pick up...
However you could just as well use encryption at the channel level ... but that would leave the data in clear at the qmgr level in transit.
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| J.D |
| Posted: Thu Jun 10, 2010 10:04 pm Post subject: |
|
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
[quote="fatherjack"]
| fatherjack wrote: |
| J.D wrote: |
| so App B would do the encryption. |
I meant decryption, obviously. |
Is it possible by using API exit on MQGET? |
|
| Back to top |
|
|
| Mr Butcher |
| Posted: Thu Jun 10, 2010 11:31 pm Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
yes, why not, if the API exit is supported on your plattform....... but i'd go for the application solution
App A (Sends Encrypt Data) ---> Qmgr 1 ---> Qmgr 2 ----> App "decrypt" ---> App B
_________________
Regards, Butcher |
|
| Back to top |
|
|
| J.D |
| Posted: Mon Jun 14, 2010 3:31 pm Post subject: |
|
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
| Mr Butcher wrote: |
yes, why not, if the API exit is supported on your plattform....... but i'd go for the application solution
App A (Sends Encrypt Data) ---> Qmgr 1 ---> Qmgr 2 ----> App "decrypt" ---> App B |
Is it something we need to have Data-Conversion exit? MQ is running on Windows 2003 32-bit and Sun Solaris 5.10. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon Jun 14, 2010 7:14 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
No exit if you use the app route. Just a decrypting app between the app queue and the receiving queue.
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
