ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » SSL support for TCPIPClient nodes in 6.1.0.9?

Post new topic  Reply to topic
 SSL support for TCPIPClient nodes in 6.1.0.9? « View previous topic :: View next topic » 
Author Message
gfrench
PostPosted: Fri Mar 25, 2011 6:40 am    Post subject: SSL support for TCPIPClient nodes in 6.1.0.9? Reply with quote

Acolyte

Joined: 10 Feb 2002
Posts: 71
Can someone else confirm that SSL support for TCPIPClientOutput and TCPIPClientReceive nodes is available in 6.1.0.9 and not just 7. Its not mentioned in the manuals under the TCPIPClient nodes in the 6.1.0.9 infocenter, although it is in v7 infocenter.

The mqsicreateconfigurableservice fails with :-

BIP8984W: Configurable service object name 'TCPIPClient : MyConfigService : SSLProtocol' was not found.

But this may be because I have not created certificate keystores and the like. Any help might save me a lot of issues working through the SSL.

Thanks

Graham
Back to top
View user's profile Send private message Send e-mail Visit poster's website
gfrench
PostPosted: Mon Mar 28, 2011 8:17 am    Post subject: Reply with quote

Acolyte

Joined: 10 Feb 2002
Posts: 71
This is very painful. Any help greatly appreciated

I've made the assumption I could not add the SSL parameters in my previous post 'SSLProtocol' to my configurable service because I had not set up the SSL infastructure. I proceeded to

1/ create broker keystore

gsk7cmd -keydb -create -db BK1keystore -pw password -type jks

2/ tell the broker about the keystore

mqsichangeproperties BK1 -o BrokerRegistry -n brokerKeystoreFile -v "C:\Program Files\IBM\MQSI\6.1\BK1keystore.jks"

3/ tell the broker the password of the keystore

mqsisetdbparms BK1 -n "brokerKeystore::pasword" -u temp -p password


4/ Amend the cofigurable service

mqsichangeproperties BK1 -c TCPIPClient -o MyConfigService -n SSLProtocol -v SSLv3


Again I get the same problem

BIP8984W: Configurable service object name 'TCPIPClient : MyConfigService : SSLProtocol' was not found.

I've repeated the whole thing on V7 and get the same. I've tried creating a truststore as well. I've tried adding a cypher onto the configurable service. Everything I do seems to fail.

Am I missing a step here? Has anyone got SSL and TCPIPClient connections working? I'm running 6.1.0.9.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
mqjeff
PostPosted: Mon Mar 28, 2011 8:53 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447
The info center that mentions SSLProtocol shows that it is new in 7.0.0.2.
Back to top
View user's profile Send private message
gfrench
PostPosted: Tue Mar 29, 2011 2:24 am    Post subject: Reply with quote

Acolyte

Joined: 10 Feb 2002
Posts: 71
You are correct. Thanks, that explains my pain!
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » SSL support for TCPIPClient nodes in 6.1.0.9?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
  
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.