| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| SSL for MQ over JMS |
« View previous topic :: View next topic » |
| Author |
Message
|
| narik |
 Posted: Tue Dec 19, 2017 10:36 am Post subject: SSL for MQ over JMS |
 |
|
Novice
Joined: 29 Aug 2016
Posts: 14
|
Hi Team,
we have a SAP PO team trying to connect to MQ mainframes through JMS .Now they are planning to have a SSL to connect to MQ over JMS . I belive MQ SSL is a queue manager to queue manager way.Is it possible to implement a SSL over JMS to MQ queue manger |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Dec 19, 2017 11:26 am Post subject: Re: SSL for MQ over JMS |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| narik wrote: |
Hi Team,
we have a SAP PO team trying to connect to MQ mainframes through JMS .Now they are planning to have a SSL to connect to MQ over JMS . I belive MQ SSL is a queue manager to queue manager way.Is it possible to implement a SSL over JMS to MQ queue manger |
SSL / TLS is a transport layer security. It is not restricted to qmgr to qmgr but can also be use as client to qmgr. JMS is well capable of using SSL to communicate with a queue manager, you will need to specify the ciphersuite and SSLFIPS values to the connection factory and let the jvm know about the key and trust stores...
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| zpat |
| Posted: Wed Dec 20, 2017 12:16 am Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
JMS/MQ works with SSL/TLS.
You may need to install the unrestricted Java security policy files to achieve TLS 1.2 as the default (non-US) ones are not compatible.
You need to specify keystore, trustore, passwords for these, cipher name as well as the usual MQ host address/port and channel.
Look out for MQRC 2397 errors. Usually missing certificates and the best way to solve SSL/TLS failures is a JVM SSL trace.
_________________
Well, I don't think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
