MQSeries.net :: View topic - How to test HTTPS-- pls help

rajparekh08 · Posted: Thu Nov 26, 2009 7:36 am Post subject:

Hi,
Let me put down the Requirement, what I have done, and what is needed.

Requirement:
I have to implement secure connection via HTTP.
I choose SSL.
Here the consumer application, should be able to access the service, only if it has the appropriate certs. in the request message.
Any one without the certs. should be denied service.

What I have done

I have installed the certs. on the broker. Following is the summary of the commands that i had executed:

Input
keytool -import -alias testkey file /xxxx/home/mqm/raj/occ_dummy_e1.cer -keystore /xxxx/home/mb6/keystore/teststore.keystore

Output
apdma001:/opt/IBM/mqsi/6.0/jre15/bin>home/mqm/raj/occ_dummy_e1.cer -keystore /amex/home/mb6/keystore/teststore.keystore <
Enter keystore password: keypass
Owner: CN=OCC_Dummy_E1, OU=OCC, O=AMEX, L=Pheonix, ST=AZ, C=US
Issuer: CN=OCC_Dummy_E1, OU=OCC, O=AMEX, L=Pheonix, ST=AZ, C=US
Serial number: 496f9424
Valid from: 1/15/09 12:53 PM until: 1/17/11 12:53 PM
Certificate fingerprints:
MD5: 98:62:46:AE:98:8C:3F:2C:FD:9D:9E:9B:B6:8B:A1:7B
SHA1: F5:FE:67:EC:C7:2D:33:47:31:85:B3:07:EF:0F:B3:A1:20:45:AA:57
Trust this certificate? [no]: yes
Certificate was added to keystore

Input
mqsichangeproperties WSSDPR61 -b httplistener -o HTTPSConnector -n keystoreFile -v /xxxx/home/mb6/keystore/teststore.keystore

Output
BIP8071I: Successful command completion.

Input
mqsichangeproperties WSSDPR61 -b httplistener -o HTTPSConnector -n keystorePass -v teststore
Output
BIP8071I: Successful command completion.

Input
mqsichangeproperties WSSDPR61 -b httplistener -o HTTPListener -n enableSSLConnector -v true
Output
BIP8071I: Successful command completion.

also, when I hit on th URL, in the browser, I do not get the cert error, in fact i get HTTP 404.

What is needed
1. Do I need to make any more changes, say the QMGR properties like sslev or any parameter.
2. Do I need to make any changes to the Domain connection from the toolki.
3. How will the broker verify the consumers certs??
4. And how do I test this service, If it is working right.

Do help

thnx