| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| TCP/IP Client and SSL |
« View previous topic :: View next topic » |
| Author |
Message
|
| sahamidas |
 Posted: Sun Sep 09, 2012 4:59 am Post subject: TCP/IP Client and SSL |
 |
|
Novice
Joined: 03 Mar 2012
Posts: 17
|
Hi,
whether for use SSL over TCPIP Client , we need to set up PKI at execution group ? |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Sun Sep 09, 2012 6:26 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
What happens when you try it?
What documentation have you reviewed to answer this question? |
|
| Back to top |
|
|
| sahamidas |
| Posted: Mon Sep 10, 2012 5:26 am Post subject: |
|
|
Novice
Joined: 03 Mar 2012
Posts: 17
|
I use WMB 7.0.0.4 and host emulator, i want enable SSL bettwen TCP/IP Client and Host,after create configurable service for tcpip client with this properties:
| Code: |
mqsicreateconfigurableservice enable_ssl -c TCPIPClient -o sslclient -n AlternativeAddresses , ExpireConnectionSec , Hostname , MaxReceiveRecordBytes , MaximumConnections , MinimumConnections , Port , SO_KEEPALIVE , SO_LINGER , SO_LINGER_TIMEOUT_SEC , SO_RCVBUF , SO_SNDBUF , SSLCiphers , SSLProtocol , TCP_NODELAY , TrafficClass , UseUniqueConnectionPool -v , -1 , 192.168.1.10 , 100000000 , 100 , 1 , 30000 , true , false , -1 , 0 , 0 , SSL_RSA_WITH_DES_CBC_SHA;SSL_RSA_WITH_RC4_128_MD5;SSL_RSA_WITH_3DES_EDE_CBC_SHA , SSLv3 , false , -1 , false
|
I get this error in Broker side :
| Code: |
BIP3544E: Failed to create an SSL connection to the remote host '192.168.1.10' port '30000'. Reason ''java.io.IOException: Error during SSL handshake''.
The connection to the remote computer succeeded, but the SSL layer failed to create a secure session. This can happen for many reasons, including mismatches in SSL protocols, SSL cipher suites, and missing certificates in either keystore or truststore.
Ensure that the specified SSL parameters are correct.
|
and in Host emulator :
| Code: |
Fatal Local SSL Error - ILLEGAL PARAMETER
SSL Session closed: reason = Session was closed for an unspecified reason.
|
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
