| Author |
Message
|
| PEPERO |
 Posted: Fri Oct 06, 2017 10:45 pm Post subject: MQINPUT node receiving an encrypted message |
 |
|
Disciple
Joined: 30 May 2011
Posts: 177
|
Hi all;
I'm in doubt if introducing keystore and truststore files in the execution group level supports PKI when using MQINPUT node. Please help me. It seems that it has no care when using MQINPUT node.
Due to the neccessity of implementing a strong security, The message is encrypted twice. At the first step the message is decrypted in the MQchannels and in the next step it has to be decrypted in an upper layer. |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Sat Oct 07, 2017 1:44 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Are you using AMS? 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| zpat |
| Posted: Sat Oct 07, 2017 4:07 am Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
EG level key/truststores are not for MQ usage.
Broker generally used binding mode with MQ, so no channels from the broker to the queue manager.
However IIB 10 can use MQ client mode, and can use SSL/TLS channels.
_________________
Well, I don't think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error. |
|
| Back to top |
|
|
| PEPERO |
| Posted: Sat Oct 07, 2017 5:03 am Post subject: |
|
|
Disciple
Joined: 30 May 2011
Posts: 177
|
| fjb_saper wrote: |
| Are you using AMS? |
No i'm not |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Oct 10, 2017 4:47 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| PEPERO wrote: |
| fjb_saper wrote: |
| Are you using AMS? |
No i'm not |
Then how is the message payload being encrypted? You'll need to use the same method to decrypt it.
It's improbable that you can use the broker's PKI directly for this, and impossible to get the MQInput node to do this.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
