Hi All,

I want to disable SSL in lower environment so in this process i want to it for dynamic endpoint. Can i acheive the same by simply deleting the outbound endpoint. 

Thanks in advance :) 


Cheers,
Jitendra Singh

------------------------------
jitendra singh
------------------------------

Hello Jitendra,
can you be a bit more specific what you want to do / achieve? What outgoing traffic do you want to modifiy? How's the client application (running on WAS) trying to access the remote service / endpoint?

Thanks - Hermann

------------------------------
Hermann Huebler
------------------------------

------Original Message------

Hello Jitendra,
can you be a bit more specific what you want to do / achieve? What outgoing traffic do you want to modifiy? How's the client application (running on WAS) trying to access the remote service / endpoint?

Thanks - Hermann

------------------------------
Hermann Huebler
------------------------------

Hello Jitendra,
sorry, I'm still not sure what you are doing and what you are trying to achieve. Is the WAS cluster in your environment the client or the server? As you state "... want to find out how the SSL can be disable for outbound calls ..." I seems that the application running on the WAS cluster is the client. Is that correct? The first question to ask here is - how it the application accessing the remote host? The dynamic SSL Config only becomes active if an SSL connection is requested. I.e. it depends on the client application if an SSL connection is established or not. So I'd suggest you check there first.

Hope that helps .. Hermann

------------------------------
Hermann Huebler
------------------------------

Original Message:
Sent: Fri June 21, 2019 07:03 AM
From: jitendra singh
Subject: Disabling dynamic outbound endpoint in WebSphere

Hi, 

The call to remote endpoints has been through dynamic SSL outbound which is map to WAS cluster and applications are deployed on WAS cluster level make use of this dynamic outbound SSL settings. 

I want to find out how the SSL can be disable for outbound calls to remote endpoints, can this be achieved only by removing dynamic outbound SSL config. 

Please let me know if you need more information. 

Thanks, 

Jitendra 

Original Message------

Hello Jitendra,
can you be a bit more specific what you want to do / achieve? What outgoing traffic do you want to modifiy? How's the client application (running on WAS) trying to access the remote service / endpoint?

Thanks - Hermann

------------------------------
Hermann Huebler
------------------------------

Hi Herman,
We have deployed our application on WAS at cluster level. Which  connecting to remote end points (like MQ, DB, Webservice etc.)  through dynamic outbound SSL  setting using specific SSL configuration. These connections to remote endpoints are having mutual SSL communication, like there is request-response communication happening  between application and endpoints.

In order to remove SSL (secure) communication between Application (on WAS) and remote endpoint as mentioned above, what are required steps to be implemented on WAS side. We are aware that there are similar steps those need to be performed on remote endpoint side as well.

Thanks and regards,
Jitendra


------------------------------
jitendra singh
------------------------------

Original Message:
Sent: Tue June 25, 2019 02:56 AM
From: Hermann Huebler
Subject: Disabling dynamic outbound endpoint in WebSphere

Hello Jitendra,
sorry, I'm still not sure what you are doing and what you are trying to achieve. Is the WAS cluster in your environment the client or the server? As you state "... want to find out how the SSL can be disable for outbound calls ..." I seems that the application running on the WAS cluster is the client. Is that correct? The first question to ask here is - how it the application accessing the remote host? The dynamic SSL Config only becomes active if an SSL connection is requested. I.e. it depends on the client application if an SSL connection is established or not. So I'd suggest you check there first.

Hope that helps .. Hermann

------------------------------
Hermann Huebler
------------------------------


Original Message:
Sent: Fri June 21, 2019 07:03 AM
From: jitendra singh
Subject: Disabling dynamic outbound endpoint in WebSphere

Hi, 

The call to remote endpoints has been through dynamic SSL outbound which is map to WAS cluster and applications are deployed on WAS cluster level make use of this dynamic outbound SSL settings. 

I want to find out how the SSL can be disable for outbound calls to remote endpoints, can this be achieved only by removing dynamic outbound SSL config. 

Please let me know if you need more information. 

Thanks, 

Jitendra 

Original Message------

Hello Jitendra,
can you be a bit more specific what you want to do / achieve? What outgoing traffic do you want to modifiy? How's the client application (running on WAS) trying to access the remote service / endpoint?

Thanks - Hermann

------------------------------
Hermann Huebler
------------------------------

Hello Jitendra,
maybe I'm still getting you wrong but if a connection is using SSL or not depends on the client. How is the client establishing the connection. For example: If you application running on your cluster is accessing a WebService this is done via a URL. See rfc3986 for the URL specification. The first part of the URL is the scheme  which is for a WebServices URLs usually http or https. 
This scheme then defines if SSL is used or not. If you call you WebSerice via https it's using SSL, if your WebService is called via http it's not using SSL. No matter what your dynamic outbound definition is.
The dynamic SSL outbound definition allows you to use specifc SSL configurations based on the URL (host, port etc.).
There fore if you don't want to use SSL (why??) - you'd need to change the URL the client is using to contact the server.

Hope that helps - Hermann

------------------------------
Hermann Huebler

#IBMChampion
------------------------------

Original Message:
Sent: Tue June 25, 2019 03:49 AM
From: jitendra singh
Subject: Disabling dynamic outbound endpoint in WebSphere

Hi Herman,
We have deployed our application on WAS at cluster level. Which  connecting to remote end points (like MQ, DB, Webservice etc.)  through dynamic outbound SSL  setting using specific SSL configuration. These connections to remote endpoints are having mutual SSL communication, like there is request-response communication happening  between application and endpoints.

In order to remove SSL (secure) communication between Application (on WAS) and remote endpoint as mentioned above, what are required steps to be implemented on WAS side. We are aware that there are similar steps those need to be performed on remote endpoint side as well.

Thanks and regards,
Jitendra


------------------------------
jitendra singh
------------------------------


Original Message:
Sent: Tue June 25, 2019 02:56 AM
From: Hermann Huebler
Subject: Disabling dynamic outbound endpoint in WebSphere

Hello Jitendra,
sorry, I'm still not sure what you are doing and what you are trying to achieve. Is the WAS cluster in your environment the client or the server? As you state "... want to find out how the SSL can be disable for outbound calls ..." I seems that the application running on the WAS cluster is the client. Is that correct? The first question to ask here is - how it the application accessing the remote host? The dynamic SSL Config only becomes active if an SSL connection is requested. I.e. it depends on the client application if an SSL connection is established or not. So I'd suggest you check there first.

Hope that helps .. Hermann

------------------------------
Hermann Huebler


Original Message:
Sent: Fri June 21, 2019 07:03 AM
From: jitendra singh
Subject: Disabling dynamic outbound endpoint in WebSphere

Hi, 

The call to remote endpoints has been through dynamic SSL outbound which is map to WAS cluster and applications are deployed on WAS cluster level make use of this dynamic outbound SSL settings. 

I want to find out how the SSL can be disable for outbound calls to remote endpoints, can this be achieved only by removing dynamic outbound SSL config. 

Please let me know if you need more information. 

Thanks, 

Jitendra 

Original Message------

Hello Jitendra,
can you be a bit more specific what you want to do / achieve? What outgoing traffic do you want to modifiy? How's the client application (running on WAS) trying to access the remote service / endpoint?

Thanks - Hermann

------------------------------
Hermann Huebler
------------------------------

------Original Message------

Hello Jitendra,
can you be a bit more specific what you want to do / achieve? What outgoing traffic do you want to modifiy? How's the client application (running on WAS) trying to access the remote service / endpoint?

Thanks - Hermann

------------------------------
Hermann Huebler
------------------------------