Configure MQ Connection using SSL

Hi,
I wonder if its possible to tell the "foreign" JMS MQ client to use a specific
private key/certificate when communicating with its MQ Server which requires a
SSL connection. I have setup the parameters for the MQ part so far and if run
in an example outside WLS it uses the JCP from Sun and perfectly communicates
with the Server. We also have setup SSL with a differnt key and it works fine
(T3s, etc.). But how to tell the WLS what additional keystore/alias it should
use when the connection to the MQ server should be handled ?
Thanks for any ideas.
Regards
Tomy

WLS configuration allows to set the server's SSL identity and trust that will be
used by the server to identify itself to its SSL clients. The SSL clients running
on server using WLS SSL APIs inherit server's SSL trust configuration. The identity
of the client has to be configured via particular client API. There is no way
to configure WLS to do that for you.
Pavel.
"Tomy" <[email protected]> wrote:
>
Hi,
I wonder if its possible to tell the "foreign" JMS MQ client to use a
specific
private key/certificate when communicating with its MQ Server which requires
a
SSL connection. I have setup the parameters for the MQ part so far and
if run
in an example outside WLS it uses the JCP from Sun and perfectly communicates
with the Server. We also have setup SSL with a differnt key and it works
fine
(T3s, etc.). But how to tell the WLS what additional keystore/alias it
should
use when the connection to the MQ server should be handled ?
Thanks for any ideas.
Regards
Tomy

Similar Messages

HT201320 when trying to set up my email account, i enter add account tap in my details for my virgin media email account, after going through the veryfying, it comes back with cannot connect using ssl.

when trying to set up my personal email account, following the on screen instructions, it comes back with CANNOT CONNECT USING SSL, do you want to try setting up the account without ssl? Yes or No

Since Thunderbird does not run on iPads, what does this have to do with Thunderbird?

When I try to set up my Optimum account email I get a message saying Cannot Connect Using SSL.

When I try to set up my Optimum email account I get an error message saying Cannot Connect Using SSL.

What mail provider is it?
Have you Googled for: setup XXX email on iPhone
where xxx is the provider
You can try going to Mail>the accounts>Advanced and turn Use SSL on or off, the opposite of what it is now.

Im trying to set up email on my iphone4 and it is saying "cannot connect using SSL" what does this mean?? what am i doing wrong because i cannot set up email??

how do i set up email on my iphone??? it says "cannot connect using ssl" whats this mean, i cant recieve or send emails coz of this

Try just choosing yes when it says that. And yes if you get it a second time. Lots of mail providers don't use SSL.

New gmail account on iPhone cannot connect using SSL

Hi,
I was having problems accessing the gmail server on my iphone so i deleted the account settings on the iphone and am creating a new one. However, the iphone tells me that it cannot connect using SSL. Has anyone had a similar problem? I don't want to setup the account without this basic security.

Hey milos321,
I'm not sure what caused the issue. I believe account may have been automatically locked because abnormal activity.
You can find more detailed information here:
http://mail.google.com/support/bin/answer.py?answer=61805
http://mail.google.com/support/
Jason

HT201320 I m trying to add my gmail acoount to mail app but when i click on next button it is showing following message, cannot connect using ssl, what to do???

I m trying to add my gmail acoount to mail app but when i click on next button it is showing following message, cannot connect using ssl, what to do???

Some of the following may help:
How to enable imap: https://support.google.com/mail/troubleshooter/1668960?rd=1
For your username, did you enter the full name including "@gmail.com"
Do you have gMail 2-step verification turned on? If so, you need to use an application-specifc password instead of your normal password if using a mail app: https://support.google.com/mail/answer/1173270?hl=en

HT201320 having problems setting up email for a tiscali email address - after trying to verify ipda comes up saying cannot connect using SSL

trying to set up my tiscali email address on an ipad mini, after trying to verify, message comes up stating "cannot connect using SSL"

Not sure what the shortcut is. I'm just going, Settings > Mail > Add Account > Gmail
That is the GMail shortcut. That should work. Just for testing, use the "Other" shortcut.
Settings / Mail / Add Account / Other
Name: <put your name>
Email [email protected]
Incoming server: pop.gmail.com
Login: [email protected]
Password: yourpassword
Outgoing server: smtp.gmail.com
Login: [email protected]
Password: yourpassword
Hit SAVE.
It should set itself up correctly without you having to specify anything else. Try that.

Connecting Using SSL Authentication Without Username and Password

Hi,
We're on RedHat Linux 4.0 using 10.2.0.3 (server/client). We're trying to figure out a way to connect to the database using instantclient and JDBC-OCI and SSL authentication without using a username or password. According to the documentation this should be possible but no sample code is given.
LD_LIBRARY_PATH is set /opt/app/oracle/product/10.2.0/db_1/lib:/usr/lib:/home/oracle/instantclient where the instantclient was installed from the 10.2.0.1 client software
and we are using JDK version 1.6.0_03.
We're also referencing the following paper:
http://www.oracle.com/technology/tech/java/sqlj_jdbc/pdf/wp-oracle-jdbc_thin_ssl_2007.pdf
We've got our client and server wallets configured and the sample code we tried looks like this:
import java.sql.*;
import java.sql.*;
import java.io.*;
import java.util.*;
import oracle.net.ns.*;
import oracle.net.ano.*;
import oracle.jdbc.*;
import oracle.jdbc.pool.*;
import java.security.*;
import oracle.jdbc.pool.OracleDataSource;
public static void main(String[] argv) throws Exception {
DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
Security.addProvider(new oracle.security.pki.OraclePKIProvider());
System.setProperty("oracle.net.tns_admin", "/opt/app/oracle/product/10.2.0/db_1/network/admin");
String url = "jdbc:oracle:thin:@orcl";
java.util.Properties props = new java.util.Properties();
props.setProperty("oracle.net.authentication_services","(TCPS)");
props.setProperty("javax.net.ssl.trustStore",
"/opt/app/oracle/product/10.2.0/db_1/admin/wallet/server/cwallet.sso");
props.setProperty("javax.net.ssl.trustStoreType","SSO");
props.setProperty("javax.net.ssl.keyStore", "/opt/app/oracle/product/10.2.0/db_1/admin/wallet/client/cwallet.sso");
props.setProperty("javax.net.ssl.keyStoreType","SSO");
props.put ("oracle.net.ssl_version","3.0");
props.put ("oracle.net.wallet_location", "(SOURCE=(METHOD=file)(METHOD_DATA=(DIRECTORY=/opt/app/oracle/product/10.2.0/db_1/admin/wallet/client)))");
System.out.println("At Here...");
OracleDataSource ods = new OracleDataSource();
//ods.setUser("scott");
//ods.setPassword("tiger");
ods.setURL(url);
ods.setConnectionProperties(props);
System.out.println("At Here1...");
Connection conn = ods.getConnection();
System.out.println("At Here2...");
Statement stmt = conn.createStatement();
ResultSet rset = stmt.executeQuery("select 'Hello Thin driver SSL "
+ "tester ' from dual");
while (rset.next())
System.out.println(rset.getString(1));
rset.close();
stmt.close();
conn.close();
When this code is compiled and run, the following error is thrown:
Exception in thread "main" java.sql.SQLException: invalid arguments in call
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:112)
If a username and password is supplied, the code works. So does anyone have a working of using SSL to authenticate without supplying username/password?
Thanks
mohammed

Hi,
I just solved this. I noticed from another thread that I was not using the OCI driver (see below):
String url = "jdbc:oracle:thin:@pki14";
Once I changed it to:
String url = "jdbc:oracle:oci:@pki14";
The code worked perfectly. One more setting that you'll have to do is to create the user you want to connect as externally:
create user scott identified externally as
'CN=acme, OU=development, O=acme, C=US';
grant connect,create session to scott;
Note that the DN should be the same as the SSL certificate that you created in your wallet.
hth
mohammed

HANA Studio connect using SSL

Hi ,
I configured SSL in Hana server using Snote 1718944 and configured the JDBC settings using Security Guide "4.3.1.1 Server-Side SSL Configuration for ODBC/JDBC Client Access" and "4.3.1.3 Configuring SSL for SAP HANA Studio Connections" . while conmecting to database using SSL , getting below JDBC trace :
Thread 15490f81 Thread-209 Timestamp: 2014-04-04 15:01:30.637
new Connection 'jdbc:sap://16.184.47.138:31015'
locale=en_US
user=SYSTEM
password=***
timeout=0
reconnect=true
validateCertificate=true
encrypt=true
new RTEException: -813 Cannot connect to host 16.184.47.138:31015 [Connection reset], -813.
whereAmIjava.lang.Throwable
    at com.sap.db.util.Tracer.whereAmI(Tracer.java:352)
    at com.sap.db.rte.comm.RTEException.<init>(RTEException.java:66)
    at com.sap.db.rte.comm.SecureCommunication.openSocketIntern(SecureCommunication.java:793)
    at com.sap.db.rte.comm.SecureCommunication.openSocket(SecureCommunication.java:512)
    at com.sap.db.rte.comm.SecureCommunication.<init>(SecureCommunication.java:99)
    at com.sap.db.rte.comm.SecureCommunication.<init>(SecureCommunication.java:55)
    at com.sap.db.rte.comm.SecureCommunication$1.open(SecureCommunication.java:60)
    at com.sap.db.jdbc.topology.Topology.getSession(Topology.java:145)
    at com.sap.db.jdbc.Driver.openByURL(Driver.java:1019)
    at com.sap.db.jdbc.Driver.connect(Driver.java:230)
    at com.sap.ndb.studio.jdbc.JDBCConnection$1.run(JDBCConnection.java:153)
using null
=> FAILED
please guide
Regards,
Siva

Hi,
i have one doubt here..
please provide the procedure to do the below activity ..
Using the keytool command line tool, import the trust store file that contains the server root certificate into either the Java keystore or your personal user keystore
i used below commnd, is it right???
keytool -import -trustcacerts -alias root -file getCert.cer -keystore keystore.jks
Regards,
Siva

Configuring GALsync to use SSL

Hi all,
Does anyone have a link to instructions for configuring FIM GALsync to use SSL rather than just sign and encrypt LDAP traffic please?
just ticking the box doesn't work, so I'm assuming certificates need to be installed at both ends, not sure what certificates (internal vs public CA), or where to install them (just at the OS level?)
Thanks
Charlie

I don't have access to logs right now, but to answer your other question, SSL works fine when sending from Mail.
But with Mail, I supply the username and password; which user does SquirrelMail use to send?

HT201320 When i try to set up my mail account and get to save/verifying - I get a notice saying Cannot Connect Using SSl-

When i try to set up my mail acct. and get6 to save/verifying - I get a notice saying Cannot connect to SSL.

What mail provider is it?
Have you Googled for: setup XXX email on iPhone
where xxx is the provider
You can try going to Mail>the accounts>Advanced and turn Use SSL on or off, the opposite of what it is now.

AIR on Android can't connect using SSL

I'm trying to connect to a Java server using SSL, with a signed and trusted certificate, but keep getting InvalidCertificate error.
Everything is fine with the certificate, but the error happens when connecting through android AIR app.
Connection works fine when connecting without SSL, but that is not an option.
What may be wrong?

More info:
Renaming the cert8.db didn't change anything.
I get into these ILO interfaces fairly often and I can say that Firefox had a problem over a year ago (or so) where it would let you in once and then say (IIRC) Invalid Cookie on subsequent attempts. Maybe deleting the cert8.db would fix that. Anyway, an update fixed that issue.
I just tested with Firefox 17 and it worked fine. Here are screen shots and the .cer file I exported. This is from a different (virgin) server at .93
https://www.dropbox.com/l/gGYGz2myJnUu9uNoPwsYxd
(Hope this works -- I'm new to DropBox)
IE says:
The security certificate presented by this website was not issued by a trusted certificate authority.
The security certificate presented by this website was issued for a different website's address.
I didn't generate the certificate; the come pre-generated by HP. Anyway, I tried re-generating the certificate and I now get this error:
Secure Connection Failed
An error occurred during a connection to 10.1.20.91. You have received an invalid certificate. Please contact the server administrator or email correspondent and give them the following information: Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number. (Error code: sec_error_reused_issuer_and_serial)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
I tried to attach the exported certificate, but I seem to only be allowed to upload graphical images.
IE Key Usage says: Certificate Signing, Off-line CRL Signing, CRL Signing (06)

Configuring SquirrelMail to use SSL with SMTP

I ran the conf.pl script to have SquirrelMail access my IMAP server via SSL, and everything works.
I then tried to use SSL with SMTP as well but when I used SquirrelMail to send mail, I got an error saying "Can't open SMTP stream". What is the correct setting to tell conf.pl to use?
I had secure SMTP enabled and chose CRAM-MD5 for the authentication method.
I actually have my web server and smtp server on the same machine, so this is more of a hypothetical question. In the end I turned off secure SMTP and set authentication back to none.
Ben

I don't have access to logs right now, but to answer your other question, SSL works fine when sending from Mail.
But with Mail, I supply the username and password; which user does SquirrelMail use to send?

Configure DB connections used by Human workflow

Hi All
We are using Oracle BPEL for orchestrating a process flow; the BPEL process uses Human workflow service for assigning tasks to users and Java client code(SOAP client) is used to update tasks assigned to users.(we are not using Worklist application). The users are updating the tasks using the java client code and this is a continuos process.i.e. users work continuosly in shifts.
The workflow service seems to utilize lot of DB resources as 50-60 users are working continuously at the same time... Though we can configured the DB parameters/connection pool we are having some performance issues..
Just wondering if we can have a seperate connection pool/data source for Human workflow service?? Then orabpel application and workflow service can use seperate pools and the load can be reduced..
Any documentation/pointers on this will be of great help on this...
Thanks

You can / should have your HW app in a different, database, at least schema. Then it is just a matter of setting up a differnt connection pool for the HW app.
There is also noting stopping you from having 2 different connection pools pointing to the same oracle schema. One for HW and one for bpel. They can be tuned accordingly.
cheers
James

SM59 and a HTTP Client Connection Using SSL

All,
I'm running an ECC 6.0 (EHP 5) system. Our ECC System is a dual stack system. We've recently enabled SSL on the ECC's java stack. The SSL Server Certificate has been signed by my organization's internal CA. All of our desktops recognize this CA. I'm pretty sure SM/59/our ABAP system does not.
After enabling HTTPS on the Java Stack (TCP port 5XX01) we disabled the HTTP service (5XX00) per our security overlords mandate.
The only application we have running on the Java Stack is Adobe Document Services. The setup guide for ADS is located here.
As you can see, ADS involves a HTTP Connection in SM59. How do I configure this HTTP connection in SM59 over SSL (HTTPS).
Key considerations:
1. I've not imported our Enterprises' Root CA into the Trusted CAs for AS ABAP for the main reason that I do not know how to. How do I do this?

Presently I have gone to the "Logon & Security" tab of SM59. Under "Security Options" I have set SSL to "Active". SSL Certificate is set to ANONYM SSL (Anonymous). On the "Technical Settings" tab I have updated the port to point to the HTTPS port.
When I test the RFC, as presently configured, the error is "ICM_HTTP_CONNECTION_FAILED", with no additional details or long text.

Configure MQ Connection using SSL

Similar Messages

Maybe you are looking for