StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>Ok. I solve this by myself.</p> <p><strong>Configure WMQ:</strong></p> <ol> <li><p>Create keystore</p> <p>runmqckm -keydb -create -db "c:\dev\sslqm001\sslqm001.kdb" -pw serverpass -type cms -expire 365 -stash</p></li> <li><p>Create certificate and add it to keystore</p> <p>runmqckm -cert -create -db "c:\dev\sslqm001\sslqm001.kdb" -pw serverpass -label ibmwebspheremqssl_qm001 -dn "CN=SSL_QM001,OU=IT,O=SomeCompany,L=Minsk,ST=Belarus,C= BY" -expire 365</p></li> <li><p>Export this certificate from keystore to file.</p> <p>runmqckm -cert -extract -db "c:\dev\sslqm001\sslqm001.kdb" -pw serverpass -label ibmwebspheremqssl_qm001 -target SSL_QM001.crt -format ascii</p></li> <li><p>In Queue Manager settings, tab "SSL" set path to keystore without <em>.kdb</em> and FIPS to No:</p> <p>ALTER QMGR SSLKEYR('c:\dev\sslqm001\sslqm001') ALTER QMGR SSLFIPS(NO)</p></li> <li><p>Create new channel</p></li> <li><p>In channel settings, tab "SSL" set cipher to some value(with works for me: DES_SHA_EXPORT), and auth to optional</p> <p>DEFINE CHANNEL('SSL_CHANNEL') CHLTYPE(SVRCONN) TRPTYPE(TCP) SSLCIPH(DES_SHA_EXPORT) SSLCAUTH(OPTIONAL) REPLACE</p></li> <li><p>In Queue Manager refresh SSL:</p> <p>REFRESH SECURITY TYPE(SSL)</p></li> </ol> <p><strong>Change your appcontex:</strong></p> <pre><code><bean id="mqConnectionFactory" class="com.ibm.mq.jms.MQQueueConnectionFactory"> <property name="hostName" value="${queue_hostname}"/> <property name="port" value="${queue_port}"/> <property name="queueManager" value="${queue_manager}"/> <property name="transportType" value="1"/> <property name="SSLCipherSuite" value="SSL_RSA_EXPORT_WITH_RC4_40_MD5"/> <property name="channel" value="ssl_channel"/> </bean> </code></pre> <p><strong>Setup SSL on WAS</strong></p> <ol> <li><p>Go To:</p> <p>Security → SSL certificate and key management → SSL configurations → NodeDefaultSSLSettings → Key stores and certificates → NameOfStore → Signer certificates</p></li> <li><p>Add your certificate, that we export in <em>step 3</em></p></li> </ol>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload