| Author |
Message
|
| ALCSALCS |
 Posted: Fri Nov 11, 2011 5:23 am Post subject: MQ SSL |
 |
|
Acolyte
Joined: 14 Apr 2002
Posts: 61
|
As I am implementing one way handshake when the client SSL ( QM1 sender channel) starts the channel it will request the certificate to QM2 ibmwebspheremqqm2 but because I defined SSLCAUTH as OPTIONAL the authentication does not fail if no certificate is sent by the client SSL
Is this correct ?
Many Thanks |
|
| Back to top |
|
 |
| exerk |
| Posted: Fri Nov 11, 2011 5:40 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Please do not use the same title for two different posts. As regards your question, please try reading the manuals, i.e. Info Centre, first as generally the answers are already in there.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| ALCSALCS |
| Posted: Fri Nov 11, 2011 5:59 am Post subject: |
|
|
Acolyte
Joined: 14 Apr 2002
Posts: 61
|
Sorry, by mistake, instead of adding it as a reply I entered as a New Topic.
I read the infocentre documentation , search in Forum, I google searching for answers to my questions/doubts. Obviously I was not successful to sort out the problem so I try the forum to see if someone has experienced a similar problem.
Many Thanks |
|
| Back to top |
|
|
| mqjeff |
| Posted: Fri Nov 11, 2011 6:02 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Point to the documentation that confuses you.
Explain what you think it says, and why it confuses you. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Nov 11, 2011 6:22 am Post subject: Re: MQ SSL |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9399
Location: US: west coast, almost. Otherwise, enroute.
|
| ALCSALCS wrote: |
...but because I defined SSLCAUTH as OPTIONAL the authentication does not fail if no certificate is sent by the client SSL.
Is this correct ?
|
The clue here is the word OPTIONAL.
Read the WMQ Security manual. Search for the SSLCAUTH parameter. Read what OPTIONAL means.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Nov 11, 2011 12:50 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
Also it would look (from both of your posts) that digging in general into how SSL works (besides from MQ ) would be highly beneficial to you.
You do not seem to understand the basics of SSL...
Just because your browser is able to SSL with a website without presenting a specific certificate you downloaded for the occasion, does not mean that none is presented... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
