| Author |
Message
|
| LuckySkunk |
 Posted: Sun Jan 14, 2007 11:46 pm Post subject: SSL and MQ Explorer |
 |
|
Novice
Joined: 27 Sep 2004
Posts: 10
|
Just wondering if anyone has any experience implementing SSL on MQ Explorer. We've generated self signed certs on the client as well as the server and imported them respectively but the SSL invoked channel is blocking any access thru that channel now. Any clues?
_________________
Don't bomb us, man ... we're just IT guys |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Mon Jan 15, 2007 3:05 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Sure. It's pretty straight forward - you just have to use the client connection table option when you add the remote queue manager.
And get your client connection channel set up correctly and distribute the channel table and configure the certs and...
okay, it's not quite that straightforward. but it's doable and relatively unpainful. Just make sure to put the qmgr name in the clntconn.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| LuckySkunk |
| Posted: Mon Jan 15, 2007 5:25 pm Post subject: SSL and MQ Explorer |
|
|
Novice
Joined: 27 Sep 2004
Posts: 10
|
Thanks Jeff for your super speedy reply. Any chance of getting a kind of write-up from you? I've set up the environment using what I learned from the red book and it ain't helping much up till this stage. Thanks again.
_________________
Don't bomb us, man ... we're just IT guys |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Mon Jan 15, 2007 6:55 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
I've found MO04 to be very helpful in these kinds of situations...
Otherwise it's really a matter of copying the client channel table, and pointing at it from MQ Explorer.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| LuckySkunk |
| Posted: Wed Jan 17, 2007 10:37 pm Post subject: SSL and MQ Explorer |
|
|
Novice
Joined: 27 Sep 2004
Posts: 10
|
Thanks. Will try it.
_________________
Don't bomb us, man ... we're just IT guys |
|
| Back to top |
|
|
| LuckySkunk |
| Posted: Thu Jan 18, 2007 12:17 am Post subject: SSL and MQ Explorer |
|
|
Novice
Joined: 27 Sep 2004
Posts: 10
|
Just how does one direct the MQ Explorer to point to the Client Channel Table exactly? Is there a specific directory that I have to copy the table to? I think my problem is I can't get the MQ Explorer to refer to that table.
_________________
Don't bomb us, man ... we're just IT guys |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Jan 18, 2007 2:20 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
When you go to Show/Add the remote queue manager, you have the option of specifying the connection details yourself or using a client conn channel table file - which allows you to specify where the file is.
This means two things. 1) You can use a different file for each remote qmgr, 2) you have to use SYSTEM.ADMIN.SVRCONN, as you can't specify which CHANNEL in the table to use.
Well, I guess I haven't experimented 100% with that later point. It might work to take any channel in the file that has the right qmgr name in it.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| LuckySkunk |
| Posted: Sun Jan 21, 2007 8:00 pm Post subject: SSL and MQ Explorer |
|
|
Novice
Joined: 27 Sep 2004
Posts: 10
|
Thanks.
_________________
Don't bomb us, man ... we're just IT guys |
|
| Back to top |
|
|
|
|
