| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| SSL Connection: MQ 5.3 To MQ 6.0 |
« View previous topic :: View next topic » |
| Author |
Message
|
| dotaneli |
 Posted: Thu Oct 20, 2005 12:05 am Post subject: SSL Connection: MQ 5.3 To MQ 6.0 |
 |
|
Voyager
Joined: 19 Oct 2005
Posts: 99
Location: Israel
|
Hi,
In our organization we wish to manage all the QMgr's from a central Explorer, which requiers channel connections to all the managed qmgrs. We wish to do that using SSL.
My test enviorment includes:
A. Windows 2000 server (with MQ 5.3 Server)
B. HP-UX 11i (with MQ 6.0 Server)
I created a certificate in the HP-UX server using gsk6ikm GUI.
I assigned the certificate to the qmgr.
I copied the .p12 file to the windows server (ftp, binary mode).
I imported it to the MQ certificate store.
Now - when trying to "assign" it to the QMGR i am unable to do so...
It will not appear in the store, when trying to assign. However, when only viewing the certificates - the certificate appears.
The channel works just fine if SSLCAUTH is set to OPTIONAL. Meaning - the certificate the HP-UX sends to the windows server is OK. But windows cannot send certificate to the HP-UX server. That is why the handshake fails in case of SSLCAUTH=REQUIERD. The point of the SSL connection is that no one which is not supposed to, will connect to the servers... especially because powerfull MCAUSER's are set there.
Anyone encountered this issue before?
P.S. - I believe that it would be enough to assign the certificate to the QMGR... But how can i do that?
Thank you in advance, |
|
| Back to top |
|
 |
| Mr Butcher |
| Posted: Thu Oct 20, 2005 12:12 am Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
mqseries explorer / qmgr / properties / ssl / manage certificates / assign
_________________
Regards, Butcher |
|
| Back to top |
|
|
| dotaneli |
| Posted: Thu Oct 20, 2005 1:12 am Post subject: |
|
|
Voyager
Joined: 19 Oct 2005
Posts: 99
Location: Israel
|
I know that...
All i said is that it wouldn't work.
Nontheless, i managed assigning the certificate, afer adding it to the explorer certificates...
thanks |
|
| Back to top |
|
|
| Mr Butcher |
| Posted: Thu Oct 20, 2005 1:34 am Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
| Quote: |
| Now - when trying to "assign" it to the QMGR i am unable to do so... |
this could be all or nothing. maybe next time be more specific what you tried. because you did not post an error message i thought you did not know which procedure to follow.
_________________
Regards, Butcher |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
