MQSeries.net :: View topic - Issues with HTTP ports when SSL enabled on WMB 6.0

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Issues with HTTP ports when SSL enabled on WMB 6.0

Issues with HTTP ports when SSL enabled on WMB 6.0

« View previous topic :: View next topic »

Author

Message

prk

Posted: Thu Mar 19, 2009 9:18 am Post subject: Issues with HTTP ports when SSL enabled on WMB 6.0

Centurion

Joined: 17 Feb 2004
Posts: 102

We are using Message Broker 6.0.0.3 on a HP-UX 11.11 server. I created the Key store file, configured the Broker to use SSL on a port, deployed a sample flow but when I invoke the URL on a web browser its not able to establish a connection. It also breaks all the web services which are on a different port on the same broker. We could get the existing ones to work only by setting the enableSSLConnector to false.
Are there any issues with SSL in MB 6.0 ? are there any support packs. Any help would be appreciated.

broker_new

Posted: Thu Mar 19, 2009 12:54 pm Post subject:

Yatiri

Joined: 30 Nov 2006
Posts: 614
Location: Washington DC

Can you post what are all the steps you followed to set up the HTTPS configuration on broker.

When you said the it broke the existing web services on broker, are they HTTP or HTTPS supported Web services. If they are HTTP try issuing
mqsichangeproperties <BrokerName> -P <previous port no> and bounce it.

As for my knowledge there are no problems with SSL, except sometimes you have to bounce it twice to load the properties.
_________________
IBM ->Let's build a smarter planet

prk

Posted: Thu Mar 19, 2009 7:06 pm Post subject:

Centurion

Joined: 17 Feb 2004
Posts: 102

I followed all the steps from this link: http://publib.boulder.ibm.com/infocenter/wmbhelp/v6r0m0/index.jsp?topic=/com.ibm.etools.mft.doc/ap12235_.htm
The existing web services are on HTTP: port 7084 and the new one for HTTPS is on port: 7085 and I couldn't get anything to work.

broker_new

Posted: Fri Mar 20, 2009 7:45 am Post subject:

Yatiri

Joined: 30 Nov 2006
Posts: 614
Location: Washington DC

lets do it this way ..Post all the commands you issued on the broker.They should executed in this order.
before that using the keystore create a self signed or import a signer cert(including the root CA's) into the broker keystore.

mqsichangeproperties WBIBRK01 -b httplistener -o HTTPListener -n enableSSLConnector -v true

mqsichangeproperties WBIBRK01 -b httplistener -o HTTPSConnector -n keystoreFile -v /opt/IBM/mqsi/6.0/jre/bin/Broker_Keystore.keystore

mqsichangeproperties WBIBRK01 -b httplistener -o HTTPSConnector -n keystorePass -v xxxxxxxxxxxxxxx

mqsichangeproperties WBIBRK01 -b httplistener -o HTTPSConnector -n port -v 7091

mqsistop -i WBIBRK01

mqsistart WBIBRK01
_________________
IBM ->Let's build a smarter planet

prk

Posted: Fri Mar 20, 2009 12:44 pm Post subject:

Centurion

Joined: 17 Feb 2004
Posts: 102

There are some issues with SSL on Sun Solaris and HP-UX which are fixed only from FP 4 onwards. I guess we will have to upgrade.
http://www-01.ibm.com/support/docview.wss?uid=swg1IY89195

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Issues with HTTP ports when SSL enabled on WMB 6.0

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP