Posted: Wed Feb 11, 2004 6:38 pm Post subject: MQ SSL
Apprentice
Joined: 01 Dec 2002 Posts: 39
I have a question regarding the SSL for MQ. First, here's my scenario
In a windows enivronment I use OpenSSL and create a self-signed certificate and private key. I then create a server private key and a server certificate request. I sign this request with the CA key and then export this signed personal certificate into a PKCS12 format to be used in the queue manager or client store. In this example I used the same CA key to sign both private keys.
In a Unix environment I use ikeyman and create a key store and self signed certificate on both the receiver end and sender end within their respective key stores. Then I export their CA certificates (arm files) into the opposite keystores (for 2 way authentication).
Both scenario's work but the question is does the window's environment require that the personal certificate be signed by the same CA key on both ends? Assuming I want a 2 way authentication.
Doesn't seem that the Unix environment uses the same CA signature because I created both seperately.
Posted: Thu Feb 12, 2004 6:41 am Post subject: Can be the same?
Apprentice
Joined: 01 Dec 2002 Posts: 39
Hi Jason,
Thanks for the reply. I think you answered my question. Correct me if I'm wrong but you are saying that the CA's are different for both sides but CAN be signed by the same CA and still function correct?
Sorry if my questions sound silly, I'm just trying to understand it a little deeper.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum