ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Adding certificate in .kdb repository without restarting MQ

Post new topic  Reply to topic
 Adding certificate in .kdb repository without restarting MQ « View previous topic :: View next topic » 
Author Message
riyaz_tak
PostPosted: Tue Aug 20, 2013 5:17 am    Post subject: Adding certificate in .kdb repository without restarting MQ Reply with quote

Voyager

Joined: 05 Jan 2012
Posts: 92

Hi

I am looking for the command to dynamically add (and/or replace) a certificate into the repository, and get WMQ7 to recognise it, without having to stop and restart WMQ7.

Is there any way we can achieve it?

We have many clients and certificate for one of the customer needs to be changed.We don't want to interrupt services of other clients.

System :Solaris 10.
Back to top
View user's profile Send private message
JosephGramig
PostPosted: Tue Aug 20, 2013 5:33 am    Post subject: Reply with quote

Grand Master

Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA

You mean at the Qmgr?

First, you must add the cert that signed the client's request. If it is the same signer for everybody, then you only add it once or when it changes. Labels for the signers don't matter, but sure do for the Qmgr and clients.

'refresh security type(ssl)' is the runmqsc command to pick up the change while running.

Think about your strategy of how the maintain these certs.
Back to top
View user's profile Send private message AIM Address
riyaz_tak
PostPosted: Tue Aug 20, 2013 5:41 am    Post subject: Reply with quote

Voyager

Joined: 05 Jan 2012
Posts: 92

Thanks
Back to top
View user's profile Send private message
mqjeff
PostPosted: Tue Aug 20, 2013 6:13 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

JosephGramig wrote:
'refresh security type(ssl)' is the runmqsc command to pick up the change while running.

Be aware that this can cause your channels to stop and start.

there shouldn't be any impact from that, but it's possible.
Back to top
View user's profile Send private message
exerk
PostPosted: Tue Aug 20, 2013 6:20 am    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

mqjeff wrote:
JosephGramig wrote:
'refresh security type(ssl)' is the runmqsc command to pick up the change while running.

Be aware that this can cause your channels to stop and start.

there shouldn't be any impact from that, but it's possible.

And if there are a lot of channels it can have quite a severe impact on the queue manager.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Adding certificate in .kdb repository without restarting MQ
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.