| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQ SSL with single certificate |
« View previous topic :: View next topic » |
| Author |
Message
|
| blueman |
 Posted: Mon May 30, 2011 12:00 pm Post subject: MQ SSL with single certificate |
 |
|
Novice
Joined: 23 May 2010
Posts: 15
|
Hi,
I have 3 Queue Managers in my environment, can i procure one SSL certificate and share this across 3 QM's. .I have searched for documents online and could find less info about this setup. I have read about setting the certificate to default certificate by setting up an environment variable AMQ_SSL_ALLOW_DEFAULT_CERT with value 1. This doesnt work for us.
Can some provide some info regarding this or info about how to make the certificate default cert.
http://hursleyonwmq.wordpress.com/2007/02/16/do-you-have-to-specify-an-ssl-certificate-label/
Thanks in advance
Shaan |
|
| Back to top |
|
 |
| exerk |
| Posted: Mon May 30, 2011 2:23 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Each queue manager should have its own certificate; not to do so is pretty pointless from a security context as the CN value of the certificate DN should ideally be unique, e.g. the queue manager name.
You say that setting the AMQ_SSL_ALLOW_DEFAULT_CERT variable 'failed' but you do not state which version of WMQ you are using, and whether the conditions stated HERE were met or not.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon May 30, 2011 4:52 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| exerk wrote: |
Each queue manager should have its own certificate; not to do so is pretty pointless from a security context as the CN value of the certificate DN should ideally be unique, e.g. the queue manager name.
|
If you want less work with the certs, look at the red books where it tells you how to set up your own cert authority. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| blueman |
| Posted: Mon May 30, 2011 10:32 pm Post subject: |
|
|
Novice
Joined: 23 May 2010
Posts: 15
|
THanks for the reply,
We are using MQ version 6.0.
Regards
Shaan |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
