MQ

MQ

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Use of CCDT URL as HTTPS

    Posted 02/15/22 05:43 PM
    We're coding our MQ clients to use the CCDT URL parameter.  This all works fine when the URL is setup as HTTP.  For connections inside our firewall HTTP is ok. 

    Clients fail to connect when we switch to HTTPS.  I've verified the HTTPS URL is returning the expected data using curl, so I'm guessing this requires some extra setup with TLS on the client side.  Is HTTPS supported by the MQ clients in this way, and is this usage/setup documented somewhere?  

    BTW, "clients" refers only to the NodeJS client at the moment.  However, this one uses the MQI binaries, so I suspect all clients based on these will have the same behavior.

    Thanks,
    Jim

    ------------------------------
    Jim Creasman
    ------------------------------


  • 2.  RE: Use of CCDT URL as HTTPS

    Posted 02/16/22 05:16 AM
    Hi, it would be helpful to know what is the MQ Error Code that is being returned to understand what the underlying issue may be. Any errors on the QMGR side?

    Make sure that the CCDT has the proper cipher that is being used in it.

          },
      "transmissionSecurity": {
        "cipherSpecification": "TLS_RSA_WITH_AES_256_CBC_SHA256"
      },
​

    If all else fails, then you can trace the MQ Client.


    Brian

    ------------------------------
    Brian S Paskin
    Sr. Web Engineer
    IBM Tech Garage
    ------------------------------



  • 3.  RE: Use of CCDT URL as HTTPS

    Posted 02/16/22 06:35 AM

    Hi,

     

    I'm afraid CCDT URL doesn't support HTTPS. https://www.ibm.com/docs/en/ibm-mq/9.2?topic=tables-url-access-ccdt

     

    Regards, Matt.

     

    Matt Leming

    STSM, IBM MQ for z/OS

    Email: lemingma@uk.ibm.com

     




    Original Message


  • 4.  RE: Use of CCDT URL as HTTPS

    Posted 02/16/22 08:01 AM
    Matt, thanks for confirming.  

    Jim

    ------------------------------
    Jim Creasman
    ------------------------------

    Original Message


  • 5.  RE: Use of CCDT URL as HTTPS

    Posted 03/10/22 11:35 AM
    Alternative, use CCDT JSON.
    https://www.ibm.com/docs/en/ibm-mq/9.2?topic=tables-configuring-json-format-ccdt

    Much better, and no web calls, local setup.
    Removes one endpoint lookup failure.

    ------------------------------
    om prakash
    WI
    ------------------------------



  • 6.  RE: Use of CCDT URL as HTTPS

    Posted 03/10/22 11:43 AM
    Thanks for the suggestion.  For the vendor client connections we are providing them with a CCDT file in JSON format. 

    For internal clients we prefer the CCDT URL (which also returns JSON).  Since everything is inside the firewall use of HTTP is allowed and sufficient in this case.

    ------------------------------
    Jim Creasman
    ------------------------------

    Original Message


Related Content