MQSeries.net :: View topic

fehmees · Posted: Sun Apr 20, 2003 8:02 am Post subject: MQ SSL on two systems

It's difficult to grasp at this stage how MQ SSL on two different MQ systems. There is very seldom information available online. But tried hard to understand the concept on how MQ Series SSL works.

What I am trying out as one the requirements of MQ Project is to enable SSL running on two different W2k.

I did not experience any kind of difficulties in configuring SSL on single machine. The following guide was very helpful for starters.

http://www-3.ibm.com/software/ts/mqseries/txppacs/mc6c.html

Now, I want to use SSL feature on two remote system, using the Open SSL the messages are successful encrypted, no problems as such.

But here we are using OpenSSL, which may require patches or upgrading at times...

So, decided to use Microsoft CA server as an in-housed CA Authority.
Followed the MQ Security Redbook available & created a ROOT cert say "M1ROOT". & added this root certificate into the MQ Store.

Now, I am not sure how to use this cert, its a CA ROOT cert, not a personal certificate that is usually generated by OpenSSL.

Do I need to create a personal certificate & add under MQStore ?
Does a personal certificate with private keys can only be assigned to MQStore.

Or

do I need to use makecert to create personal key & import into MQ Data store.?

Kindly help to explain on how to achieve this scenario.
My apologies as I am not quite Microsoft guru !

cheers ! ! !