ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » MQINPUT node receiving an encrypted message

Post new topic  Reply to topic
 MQINPUT node receiving an encrypted message « View previous topic :: View next topic » 
Author Message
PEPERO
PostPosted: Fri Oct 06, 2017 10:45 pm    Post subject: MQINPUT node receiving an encrypted message Reply with quote

Disciple

Joined: 30 May 2011
Posts: 177

Hi all;
I'm in doubt if introducing keystore and truststore files in the execution group level supports PKI when using MQINPUT node. Please help me. It seems that it has no care when using MQINPUT node.
Due to the neccessity of implementing a strong security, The message is encrypted twice. At the first step the message is decrypted in the MQchannels and in the next step it has to be decrypted in an upper layer.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Sat Oct 07, 2017 1:44 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20695
Location: LI,NY

Are you using AMS?
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
zpat
PostPosted: Sat Oct 07, 2017 4:07 am    Post subject: Reply with quote

Jedi Council

Joined: 19 May 2001
Posts: 5849
Location: UK

EG level key/truststores are not for MQ usage.

Broker generally used binding mode with MQ, so no channels from the broker to the queue manager.

However IIB 10 can use MQ client mode, and can use SSL/TLS channels.
_________________
Well, I don't think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error.
Back to top
View user's profile Send private message
PEPERO
PostPosted: Sat Oct 07, 2017 5:03 am    Post subject: Reply with quote

Disciple

Joined: 30 May 2011
Posts: 177

fjb_saper wrote:
Are you using AMS?

No i'm not
Back to top
View user's profile Send private message
Vitor
PostPosted: Tue Oct 10, 2017 4:47 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

PEPERO wrote:
fjb_saper wrote:
Are you using AMS?

No i'm not


Then how is the message payload being encrypted? You'll need to use the same method to decrypt it.

It's improbable that you can use the broker's PKI directly for this, and impossible to get the MQInput node to do this.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » MQINPUT node receiving an encrypted message
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.