| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| WMB 8.0.0.3 on z/OS unrestricted Java Security suite |
« View previous topic :: View next topic » |
| Author |
Message
|
| JosephGramig |
 Posted: Fri Jan 10, 2014 12:42 pm Post subject: WMB 8.0.0.3 on z/OS unrestricted Java Security suite |
 |
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
OK, I'm reading this and it seems to be saying to copy JARs over the $JAVA_HOME/lib/security.
Instead, can I put that path in the CLASSPATH in front and override it that way?
Then when maintenance gets applied, I won't get stomped on...
Has anybody tried this?
Do you use JKS on USS or AT-TLS from RACF? |
|
| Back to top |
|
 |
| JosephGramig |
| Posted: Thu Jan 16, 2014 1:46 pm Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
Well, I got this to work.
We did copy the JAR files from the $JAVAHOME/demo/jce/policy-files/unrestricted to $JAVAHOME/lib/security and updating the CLASSPATH did not work. I guess it all gets loaded before the CLASSPATH gets a chance to override stuff.
Note that $JAVAHOME is what z/OS WMB uses and not $JAVA_HOME.
I see references to both in my ENVFILE and they do not point to the same version of Java...
To build the JKS key store (and I didn't build a separate trust store), I used the keytool program that gets delivered with Java. Oddly enough, I had to build a self signed key to build the key store. Then I build a certificate request based on that key by the label name. Signed it with my CA and received it. You may need to tinker with the keytool options as I don't think the doc is 100% correct. Imported a CA with a 4K key and all worked.
Since mine was outbound, I don't know if I needed a key for the broker but I built one anyway just because I didn't want to take another iteration. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
