| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| SSL Design Advice Needed |
« View previous topic :: View next topic » |
| Author |
Message
|
| obrienp |
 Posted: Wed Apr 09, 2003 7:05 am Post subject: SSL Design Advice Needed |
 |
|
Newbie
Joined: 09 Jul 2002
Posts: 6
|
Host 1: OS/390 running 5.2
Host 2: AIX running 5.3
Host 3: AIX running 5.3
We have a new application that will need to send messages from Host 1 to Host 3 (Host 3 is an outside vendor). The business user wants to make sure the messages are encrypted. At this point, upgading Host 1 to 5.3 is not possible. This will be our first implementation of using the SSL support in MQ. The plan is to set up the secure connection between Host 2 and Host 3 and route the messages from Host 1 through it. Is there a problem doing this? Is there a better way? Any advice would be appreciated. |
|
| Back to top |
|
 |
| mqonnet |
| Posted: Wed Apr 09, 2003 7:14 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
What you wish to achieve is currently a BUG in MQ 5.3 on SSL lines that is being fixed, from my latest knowledge.
When you setup a secure connection between Host 2 and 3, Only and Only Host 2 and 3 can communicate unless you give your private encryption key certificate to Host 1 too. Which of course beats the whole purpose of SSL.
Hence multi-hopping currently works without any issues(though i have not tested it myself yet), between a NON SSL supported MQ version to the one that is. But this should not be allowed as per SSL standards.
So, to answer your question in short. Your scenario might work fine for now, but if you upgrade any of your 5.3 systems to the next CSD level, dont be surprised to see that the existing setup doesnt work any more.
Hope this helps.
Cheers
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
