Loading

How to use TLS with IBM MQ Connector

Udgivelsesdato: Mar 2, 2024
Opgave

GOAL

To set up a Mule Application to connect with an IBM MQ instance using TLS through the IBM MQ Connector.

Please note this manual procedure is not needed any longer since IBM MQ connector version 1.2.0. After 1.2.0, TLS support is included out of the box and security parameters can be configured via the connector configuration via Anypoint Studio UI.
Trin
  1. Create your Keystore and Truststore.

You could use several tools to perform this such as Keytool and OpenSSL.

  1. Assign the Truststore and Keystore to the JVM using system properties.
-Djavax.net.ssl.trustStore=<location of trustStore>
-Djavax.net.ssl.keyStore=<location of keyStore>
-Djavax.net.ssl.keyStorePassword=<password><app>
This could be done through JVM arguments when starting the Mule Runtime or using the wrapper.conf file.
For more insight please review the knowledge base article "How can I set Mule and Java system properties at startup?".
  1. Set the required Cipher Suite in the IBM MQ Connector.

In order to set up the CipherSuite to be used, you'll require to enable additional properties in the IBM MQ Connector.


To do so from the Anypoint Studio UI:

  • On the Studio canvas click on the IBM MQ Connector and edit the Connector Configuration.
  • Under the "General" menu, select the "Advanced" tab.
  • Click on the "Additional Properties" checkbox.
  • Click the plus button (+).
  • On the Key placeholder set the following property "XMSC_WMQ_SSL_CIPHER_SUITE".
  • On the value placeholder, set the desired CipherSuite.
  • Click the "Finish" button.
An IBM MQ Connector's configuration XML could look like the following snippet: 
<ibm-mq:config name="IBM_MQ_Config" doc:name="IBM MQ Config" doc:id="129fe500-0d2d-4700-9456-f188fa3a5df3" >
        <ibm-mq:connection targetClient="NO_JMS_COMPLIANT" >
            <ibm-mq:connection-mode >
                <ibm-mq:client host="localhost" queueManager="QM1" channel="DEV.APP.SVRCONN" />
            </ibm-mq:connection-mode>
            <ibm-mq:additional-properties >
                <ibm-mq:additional-property key="XMSC_WMQ_SSL_CIPHER_SUITE" value="SSL_RSA_WITH_AES_256_CBC_SHA256" />
            </ibm-mq:additional-properties>
        </ibm-mq:connection>
</ibm-mq:config>

Disclaimer: This solution provides a suggestion that should be considered in conjunction with your specific use-case and requirements and does not represent a complete solution for all circumstances. This method is applicable for IBM MQ Connector versions up to version 1.1.1.

Vidensartikelnummer

001114532

 
Indlæser
Salesforce Help | Article