ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » SSL from Unix To Windows

Post new topic  Reply to topic
 SSL from Unix To Windows « View previous topic :: View next topic » 
Author Message
GFORCE
PostPosted: Thu Jan 17, 2013 9:14 am    Post subject: SSL from Unix To Windows Reply with quote

Voyager

Joined: 16 Jun 2003
Posts: 78
Location: WISCONSIN

Trying to set up SSL from Unix to a customers Windows box. I have the approriate certs from a CA, but the question I have is what do I send to the customer who has a Windows platform?

1. Do I export or extract the personal cert to the customer?

2. This connection is a sender channel to the customers receiver channel, does the customer have to generate his own certs and send me his public key? or can we utilize SSL with the customer importing the public key I send him only?

Any help is gratly appreciated
_________________
THANKS
Back to top
View user's profile Send private message
exerk
PostPosted: Thu Jan 17, 2013 3:05 pm    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

You need the CA cert(s) that signed his certificate and he needs the CA cert(s) that signed yours, nothing more, nothing less.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Fri Jan 18, 2013 6:04 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20700
Location: LI,NY

exerk wrote:
You need the CA cert(s) that signed his certificate and he needs the CA cert(s) that signed yours, nothing more, nothing less.

You want to look at his cert and add the relevant SSL peer values (if multiple OUs you will have to check the right order of them.

Without SSL peer verification anybody with that same root CA cert can access your qmgr.

Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » SSL from Unix To Windows
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.