Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Ok. I solve this by myself.</p> <p><strong>Configure WMQ:</strong></p> <ol> <li><p>Create keystore</p> <p>runmqckm -keydb -create -db "c:\dev\sslqm001\sslqm001.kdb" -pw serverpass -type cms -expire 365 -stash</p></li> <li><p>Create certificate and add it to keystore</p> <p>runmqckm -cert -create -db "c:\dev\sslqm001\sslqm001.kdb" -pw serverpass -label ibmwebspheremqssl_qm001 -dn "CN=SSL_QM001,OU=IT,O=SomeCompany,L=Minsk,ST=Belarus,C= BY" -expire 365</p></li> <li><p>Export this certificate from keystore to file.</p> <p>runmqckm -cert -extract -db "c:\dev\sslqm001\sslqm001.kdb" -pw serverpass -label ibmwebspheremqssl_qm001 -target SSL_QM001.crt -format ascii</p></li> <li><p>In Queue Manager settings, tab "SSL" set path to keystore without <em>.kdb</em> and FIPS to No:</p> <p>ALTER QMGR SSLKEYR('c:\dev\sslqm001\sslqm001') ALTER QMGR SSLFIPS(NO)</p></li> <li><p>Create new channel</p></li> <li><p>In channel settings, tab "SSL" set cipher to some value(with works for me: DES_SHA_EXPORT), and auth to optional</p> <p>DEFINE CHANNEL('SSL_CHANNEL') CHLTYPE(SVRCONN) TRPTYPE(TCP) SSLCIPH(DES_SHA_EXPORT) SSLCAUTH(OPTIONAL) REPLACE</p></li> <li><p>In Queue Manager refresh SSL:</p> <p>REFRESH SECURITY TYPE(SSL)</p></li> </ol> <p><strong>Change your appcontex:</strong></p> <pre><code>&lt;bean id="mqConnectionFactory" class="com.ibm.mq.jms.MQQueueConnectionFactory"&gt; &lt;property name="hostName" value="${queue_hostname}"/&gt; &lt;property name="port" value="${queue_port}"/&gt; &lt;property name="queueManager" value="${queue_manager}"/&gt; &lt;property name="transportType" value="1"/&gt; &lt;property name="SSLCipherSuite" value="SSL_RSA_EXPORT_WITH_RC4_40_MD5"/&gt; &lt;property name="channel" value="ssl_channel"/&gt; &lt;/bean&gt; </code></pre> <p><strong>Setup SSL on WAS</strong></p> <ol> <li><p>Go To:</p> <p>Security → SSL certificate and key management → SSL configurations → NodeDefaultSSLSettings → Key stores and certificates → NameOfStore → Signer certificates</p></li> <li><p>Add your certificate, that we export in <em>step 3</em></p></li> </ol>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload