| Author |
Message
|
| raz |
 Posted: Mon Aug 13, 2007 2:48 pm Post subject: ssl problem |
 |
|
Acolyte
Joined: 10 Jul 2007
Posts: 70
|
Hi,
I am using MQ5.3 CSD 10 and am using SSL third party CA (verisign) certificate in my channel. SSL certificate is going to expire on Sep2nd so What i am doing already I have requested new CSR from new database file which has been created in temp location.
What I am going to do is once I get the certificate I will place that in new database and copy in /var/mqm/qmgrs/qmgrname/ssl/key directory and will take copy of original running database file.
If anything goes wrong can I copy back existing certificate till it expires.
Do I need to restart the qmgr.
Advise me
Thanks |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Mon Aug 13, 2007 2:53 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
|
| Back to top |
|
|
| bbburson |
| Posted: Tue Aug 14, 2007 10:17 am Post subject: |
|
|
Partisan
Joined: 06 Jan 2004
Posts: 378
Location: Nowhere near a queue manager
|
You don't have to get a whole new certificate. You can order a renewal of the existing one. If you still have the *original* CSR you can submit it to your CA for a renewal. If you don't have it handy, use GSK to "recreate request" or some such and then submit that to your CA.
Once you get the renewal cert from them, GSK "Receive" it and it will replace the existing cert. |
|
| Back to top |
|
|
| raz |
| Posted: Tue Aug 14, 2007 10:23 am Post subject: |
|
|
Acolyte
Joined: 10 Jul 2007
Posts: 70
|
Thanks for your reply, I have posted the same question in MQ forum.
Thanks |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Aug 14, 2007 10:30 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| raz wrote: |
Thanks for your reply, I have posted the same question in MQ forum.
Thanks |
That's called "double-posting".
You shouldn't have done it.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| bbburson |
| Posted: Tue Aug 14, 2007 11:25 am Post subject: |
|
|
Partisan
Joined: 06 Jan 2004
Posts: 378
Location: Nowhere near a queue manager
|
| And back to your original question, yes you will have to restart the queue manager. If you were at version 6 you could use REFRESH SECURITY TYPE(SSL) but that command is not available in 5.3. |
|
| Back to top |
|
|
|
|
