| Author |
Message
|
| zpat |
 Posted: Thu Sep 16, 2010 5:00 am Post subject: WMB 6.1 and WS-Security |
 |
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
I want to implement WS-Security in WMB 6.1.08 (on AIX). With WMB acting both as a web-service consumer, and as a web-service provider.
The version of MQ is 7.0.1.3. I will later install WMB 7.0.1 as well.
Can anyone give me a start by summarising the things I need to do?
Can the broker and queue manager share a SSL certificate (or at least use the same one)?
Can the broker and queue manager share the MQ key store?
Any hints and tips appreciated. |
|
| Back to top |
|
 |
| vikas.bhu |
| Posted: Thu Sep 16, 2010 5:03 am Post subject: |
|
|
Disciple
Joined: 17 May 2009
Posts: 159
|
| Search on forum properly... |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Sep 16, 2010 5:22 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
The broker and the queue manager could in theory share a keystore, but you probably don't want to.
You can certainly use the same certificate, but again you need to consider if that actually makes sense to do as opposed to merely being convenient.
WS-Security is an entire additional layer, on top of HTTPS. But more or less, you just have to assign the default security profile and enable the checkboxes that say 'use ws-security'. It gets more complicated depending on what you're actually trying to do with ws-security, though - you may need to configure LDAP connectivity, for example.
The InfoCenter does have at least some reasonable set of steps to follow to enable it, and I'm 95% sure without having looked that there is a devworks article or two on the subject of using WS-Security in Broker. |
|
| Back to top |
|
|
| zpat |
| Posted: Thu Sep 16, 2010 5:25 am Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Sep 16, 2010 5:31 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| zpat wrote: |
http://www.ibm.com/developerworks/websphere/library/techarticles/1008_fan/1008_fan.html?ca=drs-
The above dev works article relates to WMB 7, not sure how much is the same for WMB 6.1? |
It's not significantly different. There are also WS-Security Samples in the Samples Gallery. You could use those to do a cross-check.
ETA: it's not significantly different except for not using Broker Explorer but instead using Broker Admin perspective in Toolkit.
Unless you wanted to run IS02 inside MQ Explorer and then use Broker Explorer anyway. |
|
| Back to top |
|
|
| zpat |
| Posted: Thu Sep 16, 2010 6:26 am Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
| Thanks, it's slightly mixed up in these articles in terms of actions for developers to create a message flow, and the administrator actions to configure the broker. I need to do the latter, but I will work it out. |
|
| Back to top |
|
|
|
|
