ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexIBM MQ Installation/Configuration SupportMQ Queue Manager - Moving from SSL to TLS

Post new topicThis topic is locked: you cannot edit posts or make replies.
MQ Queue Manager - Moving from SSL to TLS View previous topic :: View next topic
Author Message
mbwagner
PostPosted: Fri Aug 19, 2016 5:55 am Post subject: MQ Queue Manager - Moving from SSL to TLS Reply with quote

Novice

Joined: 24 Feb 2016
Posts: 17

Hi All,

I am planning to migrate our MQ cluster queue manager from using SSL to TLS. Me and our client source application newer migrate from SSL to TLS so both are newbie on this topic.
Our present SSL RSA key size is 2048 and SSLCIPH (TRIPLE_DES_SHA_US).
MQ Version is 7.0.1.12

There are multiple source channel connect to the queue manager using SSL certifiate and this need to be migrate to the TLS.
Since there are multiple source channel using the same ssl certificate using unique mq client channel to connect queue manager, I do want to remove the existing SSL mq client channel as this will be higher risk in the case of wrong upgrade or rollback scenario and also this queue manager is member of MQ cluster.
I want to create new mq client channel for source channel and configure the TLS and if TLS handshake working fine between source application and queue maanger then SSL channel will be remove for respective source channel.

I have to choose this channel-by-channel SSL to TLS migration strategy to avoid major impact to all source application during same outage window.

If you can give me any advise about it from your experience or point me to any document about MQ Queue Manager SSL to TLS migration strategy. This will be very grateful.

Thanks,
wagner
Back to top
View user's profile Send private message
Vitor
PostPosted: Fri Aug 19, 2016 6:43 am Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 24648
Location: Ohio, USA

Locked as duplicate of this
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
Display posts from previous:
Post new topicThis topic is locked: you cannot edit posts or make replies. Page 1 of 1

MQSeries.net Forum IndexIBM MQ Installation/Configuration SupportMQ Queue Manager - Moving from SSL to TLS
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.