MQSeries.net :: View topic

flsb · Posted: Tue May 28, 2024 7:02 am Post subject:

Hi ..

I'm having this problem with this MQ setup on one of my clients.
The client setup is like this:

MQ Client -> MQIPT1 -> Akamai -> Firewall -> HTTP Proxy -> MQIPT2 -> MQ Server

Basically I need to connect my MQ channel to the MQ server and the in between is transparent to us.
The traffic must go through to Akamai and via HTTPS.
So I suggested above with MQIPT on both side.
However, I can't seems to get i working and I'm stuck.

I've gone through the MQIPT 2.1 docs and I setup as MQIPT tunneling.
Now this is where I get stucked.
It is HTTPS and therefore not HTTP tunneling, where do I setup the certificate in MQIPT in order for Akamai to accept my connection?
I keep getting handshake error or that's what the Akamai team is showing us.

My MQIPT setup as below:

[route]
Name=FLtoLIB
Active=true
ListenerPort=1417
Destination=uat-mq.server.com
DestinationPort=443
SSLClient=true
SSLClientKeyRing=/usr/mqipt/bin/UAT-MQ.pfx
SSLClientCAkeyring=/usr/mqipt/bin/lib.kdb
SSLClientKeyRingPW=/usr/mqipt/bin/lib.pwd
SSLClientCipherSuites=SSL_RSA_WITH_AES_256_CBC_SHA256
#SSLServerProtocols=TLS1.2
SSLClientSiteLabel=UAT-MQ.server.com
HTTP=true
#HTTPServer=uat-mq.server.com
#HTTPServerPort=443
HTTPProxy=uat-mq.server.com
HTTPProxyPort=443

The above is a bit messy and I've been trying all sorts of combination above but still fail to connect to the MQIPT2.

Can all the sifu here guide me on this?
It's been limited MQIPT guides online as I know not much is using this especially not for MQ protocol to go thru as HTTP protocol.

If this cannot be done, I'll probably ask my client to try to force throught MQ protocol via another port.
As their security teams mentioned that MQ port 1414 is insecure and must be https port.

Thank you.