ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » Can one QM support two groups of ssl client?

Post new topic  Reply to topic
 Can one QM support two groups of ssl client? « View previous topic :: View next topic » 
Author Message
WBI_user
PostPosted: Mon Jan 17, 2011 9:32 am    Post subject: Can one QM support two groups of ssl client? Reply with quote

Partisan

Joined: 07 Aug 2001
Posts: 386
I have two groups of SSL clients want to connect to MYQM (MQ V6 on Unix). One group is using certificates from an external CA1 and the other group using certificates from external CA2. MY understanding is a QMGR is using serever cert by lable ibmwebspheremqmyqm. If the server certificate is signed by CA1, will the clients using certificates from CA2 work? Is thius supported ?
Back to top
View user's profile Send private message
WBI_user
PostPosted: Mon Jan 17, 2011 10:03 am    Post subject: Reply with quote

Partisan

Joined: 07 Aug 2001
Posts: 386
Sorry forget to mention that they are Java or JMS clients
Back to top
View user's profile Send private message
mqjeff
PostPosted: Mon Jan 17, 2011 10:23 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447
It works fine if both the qmgr and the cert stores trust both relevant CA signers.

If you can't convince the group using CA1 to trust CA2 or vice versa, then you need to look at MQIPT.
Back to top
View user's profile Send private message
santnmq
PostPosted: Mon Jan 17, 2011 8:50 pm    Post subject: Reply with quote

Centurion

Joined: 11 Jan 2011
Posts: 125
I believe it will work fine if your queue manager's key database has the signer certificates from both the signing authorities.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » Can one QM support two groups of ssl client?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
  
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.