MQSeries.net :: View topic

JosephGramig · Posted: Mon Dec 08, 2008 8:16 am Post subject:

You do NOT need to have everybody's key and their brothers to make this work.

You need the signer's key of anybody you want to exchange stuff with and you need your own key. If there is only one signer to rule them all, you only need two keys in the keystore.

Don't drink the Info Center cool aid.

Think about how SSL works from a pragmatic point of view.

Here is a post on how to update keys:
http://www.mqseries.net/phpBB2/viewtopic.php?t=44542&highlight=ssl

Plan to make your environment simple for it will work much better. Keys expire, so think about how you will update them.

Also, going to SSL just meant you've now limited hackers to that circle of friends and if you have not secured every single other inbound channel, then you haven't done anything but waist your time.