ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » MQ SSL

Post new topic  Reply to topic
 MQ SSL « View previous topic :: View next topic » 
Author Message
ALCSALCS
PostPosted: Fri Nov 11, 2011 1:59 am    Post subject: MQ SSL Reply with quote

Acolyte

Joined: 14 Apr 2002
Posts: 61
I am running in a test environment (Solaris) two QMGR's MQ V7.
I am trying to get familiar with SSL support.
I requested a trial CA for testing.

QM1 and QM2

I installed the CA Root and Intermediate CA in QM1 (Signer Certificates) and
I installed the SSL trial certificate in QM2 (Personal Certificates) as ibmwebspheremqqm2

1) I defined in QM1 a sender channel
QM1.TO.QM2 without SSL support

and in QM2 a receiver channel
QM1.TO.QM2 without SSL support

I started the channels and it went in running State

2) I implemented the changes for SSL

In QM1 sender channel QM1.TO.QM2
I add parameter SSLCIPH

in QM2 receiver channel QM1.TO.QM2
I add parameter SSLCIPH and SSLCAUTH(OPTIONAL)

I started both channels and in QM1

SDR channel remaineds in channel status Binding with channel substate SSL handshaking

No errors logged.

Any ideas/suggestions about how can I gather some information to find out the reason of the problem?

Many Thanks
Back to top
View user's profile Send private message
exerk
PostPosted: Fri Nov 11, 2011 2:34 am    Post subject: Re: MQ SSL Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339
ALCSALCS wrote:
I installed the CA Root and Intermediate CA in QM1 (Signer Certificates) and I installed the SSL trial certificate in QM2 (Personal Certificates) as ibmwebspheremqqm2

And what about QM1's 'SSL trial certificate'?

EDIT: Moving this to the security forum.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
ALCSALCS
PostPosted: Fri Nov 11, 2011 3:19 am    Post subject: MQ SSL Reply with quote

Acolyte

Joined: 14 Apr 2002
Posts: 61
I wanted first to test SSL between QM1 and QM2.

I only defined in QM1 a sender channel and in QM2 a receiver channel and nothing else.

So as far I understood from the documentation I didn't need to install QM1's SSL trial certificate because it will not be required.

Is this correct ?

Many Thanks
Back to top
View user's profile Send private message
exerk
PostPosted: Fri Nov 11, 2011 3:24 am    Post subject: Re: MQ SSL Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339
ALCSALCS wrote:
I wanted first to test SSL between QM1 and QM2.

Two ends of a channel...and what will be exchanged during an SSL handshake etc.? The hint is there in my previous answer

Have a look at the SupportPac page, search it for SSL and see what arises.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » MQ SSL
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
  
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.