| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Setting up aservice running as local system to use SSL |
« View previous topic :: View next topic » |
| Author |
Message
|
| meaton78 |
 Posted: Fri Jul 23, 2010 10:40 am Post subject: Setting up aservice running as local system to use SSL |
 |
|
Centurion
Joined: 16 Oct 2008
Posts: 100
|
We have a program running as a local service that connect to our queue manager using a client connection. I would like to secure the channels with SSL, but I am not sure what to use for the key label. Normally we would use ibmwebspheremq followed by the username, but I'm not sure what it would be in this case. Every example that has come up in a search points to an actual username.
Does anyone have any experience with what I should use for the key label when creating the certificate? |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Fri Jul 23, 2010 10:55 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
do you mean, a program running as the windows "Local Service" user?
Don't do that.
Create a service/program specific userid, alter the service to run as that id. Then it will be the username you put into the cert name. |
|
| Back to top |
|
|
| meaton78 |
| Posted: Fri Jul 23, 2010 11:49 am Post subject: |
|
|
Centurion
Joined: 16 Oct 2008
Posts: 100
|
Ok, that's not a problem. Yes, I did mean it's currently running as "Local Service".
I did get it to connect using ibmwebspheremqsystem, and we have the client channels locked down by ssl and mcauser, but do you think it's just more secure to have the service running as a specific user? I suppose that anyone can create a service running as local system and then use it to connect to our qmgr... |
|
| Back to top |
|
|
| mqjeff |
| Posted: Fri Jul 23, 2010 12:03 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Yes, more secure.
Also, I didn't think that ibmwebspheremqsystem would work.
Interesting to note that it does.... |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
