MQSeries.net :: View topic

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » SSL on MQ v5.3

SSL on MQ v5.3

« View previous topic :: View next topic »

Author

Message

harshatej1

Posted: Wed Jun 03, 2015 12:42 pm Post subject: SSL on MQ v5.3

Acolyte

Joined: 20 Nov 2013
Posts: 61

Hi,

Does MQ v5.3 support 2048 bit SSL certificates?

exerk

Posted: Wed Jun 03, 2015 2:04 pm Post subject:

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

Why would you care that an out-of-support version (HP-NSS excepted) supports 2048 bit certificates? And what makes you think the bit-ness would be an issue rather than the algorithms it may not support?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.

mqjeff

Posted: Thu Jun 04, 2015 4:21 am Post subject:

Grand Master

Joined: 25 Jun 2008
Posts: 17447

Have you considered the time frames in which MQ v5.3 SSL support was written and maintained?

Have you examined the history of cipher changes and strengths and bitness since that time?

If you are using v5.3 in production, you should find another job. Or convince your team or client that they are criminally negligent in their systems management strategies.

harshatej1

Posted: Thu Jun 04, 2015 8:05 am Post subject:

Acolyte

Joined: 20 Nov 2013
Posts: 61

I have upgraded SSL cert from 1024 bit to 2048 bit. (MQ v5.3) I have placed the certs and bounced the queue manager. And I received following error

AMQ9654: An invalid SSL certificate was received from the remote system.

EXPLANATION:
An SSL certificate received from the remote system was not corrupt but failed validation checks on something other than its ASN fields and date. The channel is 'MQM.MQM'; in some cases its name cannot be determined and so is shown as '????'. The channel did not start.
ACTION:
Ensure that the remote system has a valid SSL certificate. Restart the channel.

Vitor

Posted: Thu Jun 04, 2015 9:15 am Post subject:

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

harshatej1 wrote:

Does MQ v5.3 support 2048 bit SSL certificates?

I'm saying "doesn't look like it"
_________________
Honesty is the best policy.
Insanity is the best defence.

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » SSL on MQ v5.3

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP