| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Renewing self-signed certs that will expire soon |
« View previous topic :: View next topic » |
| Author |
Message
|
| nahsay |
 Posted: Tue Aug 16, 2005 8:06 am Post subject: Renewing self-signed certs that will expire soon |
 |
|
Novice
Joined: 13 Feb 2003
Posts: 15
|
Hello. I have some self-signed certs that are about to expire. They were created with a 1-year lifespan. The operating system is AIX 5.2 and MQSeries 5.3.8.
Can you provide information concerning what steps I need to take to prepare and to execute? Can I create the new certs ahead of time to copy it around to the connecting queue managers key.kdb? Do I then simply remove the old one and add the new? Can i use the same label or will I need to add additional characters? Do the queue managers need to be cycled? I've only been able to connect after a cycle, but have heard if all channels are stopped prior, a queue manager cycle isn't necessary. I guess I'm looking for informal documented steps so I don't miss anything; for guidance and gotchas. Thanks!  |
|
| Back to top |
|
 |
| interactivechannel |
| Posted: Tue Aug 16, 2005 3:42 pm Post subject: |
|
|
Voyager
Joined: 20 May 2003
Posts: 94
Location: uk
|
First of all, self-signed certificates give you some admin work to do when they expire, so give the next ones a decent duration.
The key database is accessed each time a channel starts, so there's no need to stop the queue manager. You could take a copy of the current key databases, regenerate the certificates, exchange public certificates then replace the old kdbs with the new ones.
The label is associated with the key, so you will not be able to change it. Also, in the manual you'll find that the key label is how the queue manager identifies its certificate containing private key. |
|
| Back to top |
|
|
| nahsay |
| Posted: Tue Aug 16, 2005 4:21 pm Post subject: |
|
|
Novice
Joined: 13 Feb 2003
Posts: 15
|
| interactivechannel wrote: |
Also, in the manual you'll find that the key label is how the queue manager identifies its certificate containing private key. |
I guess a dumb question, but in which manual would I find this information? |
|
| Back to top |
|
|
| Anirud |
| Posted: Tue Aug 16, 2005 7:14 pm Post subject: |
|
|
Master
Joined: 12 Feb 2004
Posts: 285
Location: Vermont
|
|
| Back to top |
|
|
| Tibor |
| Posted: Tue Aug 16, 2005 8:52 pm Post subject: |
|
|
Grand Master
Joined: 20 May 2001
Posts: 1033
Location: Hungary
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
