MQSeries.net :: View topic

weq92f · Posted: Fri Nov 02, 2007 10:18 am Post subject:

I'm attempting to setup SSL against a basic 5.3 MQ system on UNIX. I have only local queues which are accessed from remote via MQclient to put/get and accessed locally to get/put via Java.

I'm new to SSL in general and am finding it very difficult to understand the related ibm MQ documentation.

Can someone point me to a good tutorial or guide for setting up SSL on MQSeries channels?

The goal is to require authentication ( userid/password ) and encrypt the data going through the queues.

Questions for now:
What are the main steps to get SSL up with the above characteristics?
These are what I've gotten from the docs:
1) create the keystore
2) create certificates
3) set SSLCIPH, SSLCAUTH in the channel definition ( SVRCONN )
4) there must be more to it that this?
What type of keystore should I create given the above access methods?
Can I get by using self-signed certificates ( this is an intranet app )? If not how/where do I find a CA to build real certs for me?
Are local connections ( those initiated from the MQ server running as the owner of all MQ objects ) required to go through SSL auth once this stuff is setup?

I know, clueless eh!

Thanks,

-klb