| Author |
Message
|
| paleyplease |
 Posted: Mon Mar 03, 2014 8:37 am Post subject: SSLKEYR & SSLCRLNL |
 |
|
Apprentice
Joined: 05 Feb 2014
Posts: 45
|
If I change the SSLKEYR for a qmgr to a dir other than the default /var/mqm/qmgrs/<QMGR>/ssl/key on UNIX does this require a QMGR bounce in order for this to take affect on WMQv7.5.0.x?
Additionally if I modify: SSLCRLNL, is a QMGR bounce required in order for this to take affect. |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Mon Mar 03, 2014 8:40 am Post subject: Re: SSLKEYR & SSLCRLNL |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| paleyplease wrote: |
If I change the SSLKEYR for a qmgr to a dir other than the default /var/mqm/qmgrs/<QMGR>/ssl/key on UNIX does this require a QMGR bounce in order for this to take affect on WMQv7.5.0.x?
Additionally if I modify: SSLCRLNL, is a QMGR bounce required in order for this to take affect. |
At a minimum a refresh security type(SSL) would be required...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| paleyplease |
| Posted: Tue Mar 04, 2014 5:40 am Post subject: |
|
|
Apprentice
Joined: 05 Feb 2014
Posts: 45
|
| Also for SSL to work is there a password string that needs to stored within a QMGR attribute? |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Mar 04, 2014 6:33 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| paleyplease wrote: |
| Also for SSL to work is there a password string that needs to stored within a QMGR attribute? |
Have you researched qmgr attributes for 'password?'
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Mar 04, 2014 6:51 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| paleyplease wrote: |
| Also for SSL to work is there a password string that needs to stored within a QMGR attribute? |
Why do you think a stash file exists? 
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Tue Mar 04, 2014 8:27 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
| Remember, it is trivial to crack a stash file. Secure your ssl directory and files tightly. |
|
| Back to top |
|
|
|
|
