MQ on z/OS security (SSL) question.
Hello,
I noticed strange MQ SVRCONN channel behavior. Channel is enabled for SSL encryption and SSL client certificate is enforced.
The client certificate's public keys are stored in RACF. The channel parameters are:
DEFINE CHANNEL ('CHLA') +
CHLTYPE(SVRCONN) +
TRPTYPE(TCP) +
DESCR('MQ SVRCONN chl for users') +
QSGDISP(QMGR) +
PUTAUT(DEF) +
MAXMSGL(104857600) +
MCAUSER(' ') +
RCVDATA(' ') +
RCVEXIT(' ') +
SCYDATA(' ') +
SCYEXIT(' ') +
SENDDATA(' ') +
SENDEXIT(' ') +
SSLCAUTH(REQUIRED) +
SSLCIPH('TRIPLE_DES_SHA_US') +
SSLPEER(' ') +
KAINT(AUTO) +
REPLACE
From RACF I have removed a public certificate user and got the following message:
+CSQX632I +MQ1 CSQXRESP SSL certificate has no associated user ID, 315
remote channel
- channel initiator user ID used
+CSQX500I +MQ1 CSQXRESP Channel MQCHANN1 started
So, the certificate could not be located, so the CHINIT user id was used. But my understanding is that this connection should fail (because of the parameter SSLCAUTH(REQUIRED)). The PUTAUT(DEF) parameter is left blank intentionally because many users with different userIDs are using the same channel.
Any suggestions? Is this normal behavior? What should I do in order to enforce SSL authentication?
Best Regards, Peter
Peter Geršak
3Gen d.o.o., Tržaška 21, 1000 Ljubljana
M: +386 31 332 787
T: +386 1 42 10 475
E: [EMAIL PROTECTED]
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting July 19, 2004 and will not return until July 23, 2004. I'm on vacation. I'm reading mail on request only. In case of urgency, please call me on my mobile: +386 40 456 639. If you cannot reach me, please leave a voice mail or try to call me later. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting June 22, 2004 and will not return until July 4, 2004. I'm on the business trip. I'm reading mail on request only. In case of urgency, please call me on my mobile: +386 40 456 639. If you cannot reach me, please leave a voice mail or try to call me later. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting June 6, 2004 and will not return until June 11, 2004. I'm on the business trip. I'm reading mail on request only. In case of urgency, please call me on my mobile: +386 40 456 639. If you cannot reach me, please leave a voice mail or try to call me later. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting April 8, 2004 and will not return until April 16, 2004. I'm on a vacations. I'm reading mail on request only. In case of urgency, please call me on my mobile: +386 40 456 639. If you cannot reach me, please leave a voice mail. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting March 25, 2004 and will not return until March 26, 2004. I'm on a business trip. I'm reading mail on request only. In case of urgency, please call me on my mobile: +386 40 456 639. If you cannot reach me, please leave a voice mail. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting January 7, 2004 and will not return until January 19, 2004. I'm on vacation and business trip. I'm reading mail on request only. In case of urgency, please call me on my mobile: +386 40 456 639. If you cannot reach me, please leave a voice mail. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting December 24, 2003 and will not return until January 4, 2004. I'm on vacation. I'm reading mail on request only. In case of urgency, please call me on my mobile: +386 40 456 639. If you cannot reach me, please leave a voice mail. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Oracle PL/SQL support on Tru64
Hello, I have Queue Manager and Oracle 8 DB on Tru64 Unix V5.1. I would like to use PL/SQL applications to interface MQ. Can someone help me with the sample code for PL/SQL language support on Tru64? I have seen the support pac ma0i which is PL/SQL support on AIX. However compiling of this support pac on Tru64 always fails, telling me that libmqm can not be found. Best Regards, Peter Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting November 16, 2003 and will not return until November 21, 2003. For urgent queries for Slovenian customers please contact Tomaz Stubelj ([EMAIL PROTECTED]). For urgent queries for CEMA please contact Benedikt Klotz ([EMAIL PROTECTED]). Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting November 10, 2003 and will not return until November 11, 2003. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting October 20, 2003 and will not return until November 4, 2003. I will be out of the office starting October 20, 2003 and will not return until November 4, 2003 - due to my daughter birth. Occasionally I will read mail and answer short and urgent questions. My stand-in for Slovenia is Tomaz Stubelj ([EMAIL PROTECTED]) and for other countries Benedikt Klotz ([EMAIL PROTECTED]). Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting October 15, 2003 and will not return until October 17, 2003. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting October 15, 2003 and will not return until October 16, 2003. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting August 7, 2003 and will not return until August 22, 2003. Business trip and vacation. My stand-in for Slovenia and SEA is Gregor Loncar ([EMAIL PROTECTED]). For all other countries please contact Anthony Chapman ([EMAIL PROTECTED]). Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting July 30, 2003 and will not return until August 8, 2003. Business trip to Germany and Saudi Arabia. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting March 24, 2003 and will not return until March 28, 2003. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting February 10, 2003 and will not return until February 14, 2003. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting January 30, 2003 and will not return until February 6, 2003. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting December 23, 2002 and will not return until January 6, 2003. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting October 28, 2002 and will not return until December 6, 2002. I will read email but will have limited time to respond. For any WebSphere MQ and IBM CrossWorlds related questions please send an email to [EMAIL PROTECTED] or [EMAIL PROTECTED] For short/urgent questions I am available on telephone +44 1962 816 747. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting October 28, 2002 and will not return until December 6, 2002. I will read email but will have limited time to respond. For any WebSphere MQ and IBM CrossWorlds related questions please write an email to [EMAIL PROTECTED] or [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Peter Gersak/Slovenia/IBM is out of the office.
I will be out of the office starting October 25, 2002 and will not return until December 6, 2002. I will read email but will have limited time to respond. For any WebSphere MQ and IBM CrossWorlds related questions please write an email to [EMAIL PROTECTED] or [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
