MQ

MQ

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Authenticate certificates on mqweb side

    Posted Wed March 05, 2025 06:29 PM

    Hello,
    I have configured mqweb remote several times using SSL to access a remote Queue Manager.

    Now, in the same type of configuration, the Queue Manager has a certificate with an AIA, and CrlDistributionPoint URLs.
    The server hosting mqweb standalone has no access to OCSP responders, and I want to disallow OCSP and CRL checks.


    With a classic MQ client mode, I can specify in the mqclient.ini :
    CDPCheckExtensions = NO 
    OCSPCheckExtensions = NO
    With mqweb standalone I haven't found the information.

    Does anyone have an idea?
    Thank you.



    ------------------------------
    Luc-Michel Demey
    DEMEY CONSULTING
    lmd@demey-consulting.fr
    #IBMChampion
    ------------------------------


  • 2.  RE: Authenticate certificates on mqweb side

    Posted Thu March 06, 2025 04:34 AM

    Assuming MQWEB is java based, try this JRE option to disable OCSP. Not sure where you would set this.

    -Dcom.sun.net.ssl.checkRevocation=false 



    ------------------------------
    Peter T
    ------------------------------

    Original Message


  • 3.  RE: Authenticate certificates on mqweb side

    Posted Thu March 06, 2025 10:20 AM

    or MQWeb SSL checks, add -Dcom.ibm.mq.cfg.jms.OCSPCheckExtensions=NO -Dcom.ibm.mq.cfg.jms.CDPCheckExtensions=NO to server.env and restart-like bypassing PS5's offline update checks for a smoother connection.



    ------------------------------
    Tech techproduct
    ------------------------------

    Original Message


  • 4.  RE: Authenticate certificates on mqweb side

    Posted Sun March 09, 2025 01:23 PM

    Thank you for this information.
    Where can I find the documentation for these parameters? I didn't see anything in the KC.



    ------------------------------
    Luc-Michel Demey
    DEMEY CONSULTING
    lmd@demey-consulting.fr
    #IBMChampion
    ------------------------------

    Original Message


Related Content