| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| SSLSocketFactory vs SSLEngine |
« View previous topic :: View next topic » |
| Author |
Message
|
| tczielke |
 Posted: Tue Sep 10, 2019 4:55 pm Post subject: SSLSocketFactory vs SSLEngine |
 |
|
Guardian
Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA
|
When using IBM MQ Classes for Java (base Java for short) or IBM MQ Classes for JMS (JMS for short), the programmer has the option to build their own SSLSocketFactory and attach it appropriately (e.g. MQEnvironment.sslSocketFactory for base Java) for MQ to use for an SSL/TLS MQ connection.
I was reading a JSSE reference document:
https://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/JSSERefGuide.html
And I noticed that there is also an SSLEngine that can be used instead of the SSLSocketFactory. The doc also said that there can be performance improvements with using the SSLEngine over the SSLSocketFactory.
I did not see an option for building an SSLEngine for base Java or JMS for MQ, so was just curious if IBM had ever explored using the SSLEngine for IBM MQ base Java/JMS, in case anyone knows.
_________________
Working with MQ since 2010. |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Wed Sep 11, 2019 12:43 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Isn't supplying -Djavax.net.ssl.keystore and the other SSL relevant parameters on the command line using the SSL Engine?? 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| tczielke |
| Posted: Wed Sep 11, 2019 4:04 am Post subject: |
|
|
Guardian
Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA
|
| fjb_saper wrote: |
| Isn't supplying -Djavax.net.ssl.keystore and the other SSL relevant parameters on the command line using the SSL Engine?? |
I wouldn't think so. When the programmer does not build and set the SSLSocketFactory, I would think the IBM MQ Java/JMS code makes a SSLSocketFactory.getDefault() call to build a default one. This default one would act on javax.net.ssl system properties in it is build.
_________________
Working with MQ since 2010. |
|
| Back to top |
|
|
| tczielke |
| Posted: Fri Sep 13, 2019 6:43 am Post subject: |
|
|
Guardian
Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
