SSL implemented for secure communication over network. For establishing a tunnel between Queue Managers SSL is important. Here used Sha256 algorithm for encryption & decryption.

1. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
SSL on DQM setup
C:WINDOWSsystem32>DSPMQ
QMNAME(QM2) STATUS(Running)
QMNAME(QM1) STATUS(Running)
C:WINDOWSsystem32>RUNMQSCQM2
5724-H72 (C) CopyrightIBMCorp. 1994, 2020.
StartingMQSC for queue managerQM2.
DEFINE QL(RECEVQ)
1 : DEFINEQL(RECEVQ)
AMQ8006I: IBMMQ queue created.
DEFINE CHANNEL(TO.QM2) CHLTYPE(RCVR)
2 : DEFINECHANNEL(TO.QM2) CHLTYPE(RCVR)
AMQ8014I: IBMMQ channel created.
DEFINE LSTR(QM2.LSTR) TRPTYPE(TCP) PORT(1111) CONTROL(QMGR)
3 : DEFINELSTR(QM2.LSTR) TRPTYPE(TCP) PORT(1111) CONTROL(QMGR)
AMQ8626I: IBMMQ listenercreated.
START LSTR(QM2.LSTR)
4 : STARTLSTR(QM2.LSTR)
AMQ8021I: Requesttostart IBMMQ listeneraccepted.
DIS LSSTATUS(QM2.LSTR)
5 : DISLSSTATUS(QM2.LSTR)
AMQ8631I: Displaylistenerstatusdetails.
LISTENER(QM2.LSTR) STATUS(RUNNING)
PID(26540) STARTDA(2022-03-14)
STARTTI(20.32.42) DESCR( )
TRPTYPE(TCP) CONTROL(QMGR)
IPADDR(*) PORT(1111)

2. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
BACKLOG(100)
END
6 : END
5 MQSC commandsread.
No commandshave a syntax error.
All validMQSCcommandswere processed.
C:WINDOWSsystem32>RUNMQSCQM1
5724-H72 (C) CopyrightIBMCorp. 1994, 2020.
StartingMQSC for queue managerQM1.
DEFINE QL(QM2) USAGE(XMITQ)
1 : DEFINEQL(QM2) USAGE(XMITQ)
AMQ8006I: IBMMQ queue created.
DEFINE QR(SENDQ) RNAME(RECEVQ) RQMNAME(QM2) XMITQ(QM2)
2 : DEFINEQR(SENDQ) RNAME(RECEVQ) RQMNAME(QM2) XMITQ(QM2)
AMQ8006I: IBMMQ queue created.
DEFINE CHANNEL(TO.QM2) CHLTYPE(SDR) XMITQ(QM2) CONNAME('LOCALHOST(1111)')
3 : DEFINECHANNEL(TO.QM2) CHLTYPE(SDR) XMITQ(QM2) CONNAME('LOCALHOST(1111)')
AMQ8014I: IBMMQ channel created.
START CHANNEL(TO.QM2)
4 : STARTCHANNEL(TO.QM2)
AMQ8018I: Start IBMMQ channel accepted.
DIS CHS(TO.QM2)
5 : DISCHS(TO.QM2)
AMQ8417I: DisplayChannel Statusdetails.
CHANNEL(TO.QM2) CHLTYPE(SDR)
CONNAME(127.0.0.1(1111)) CURRENT
RQMNAME(QM2) STATUS(RUNNING)
SUBSTATE(MQGET) XMITQ(QM2)

3. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
END
6 : END
5 MQSC commandsread.
No commandshave a syntax error.
All validMQSCcommandswere processed.
C:WINDOWSsystem32>AMQSPUTSENDQQM1
Sample AMQSPUT0 start
target queue isSENDQ
OM NAMAHSHIVAYA
NAMO NARYANA
JAISWAMI NARAINI
Sample AMQSPUT0 end
C:WINDOWSsystem32>AMQSGETRECEVQQM2
Sample AMQSGET0 start
message <OMNAMAHSHIVAYA>
message <NAMONARYANA >
message <JAISWAMINARAINI>

4. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.

5. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
SelectIBMKey Managementtool.Before thatopenthe SSLfoldersusingadminaccessinyourfile
system.
CreatingKeydatabase for QM1. The Keydata base containall informationof 3files.Wheneverthe
any additionof fileshappeninginSSLfolderthose details getupdatedinkeydatabase.

6. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
Click New and select QM1 path for creating keydata base.
Give password

7. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
All three files in SSL folder of QM1
We can have CA signedcertificate butforinternal consumptionoreducationpurposeI am using self
signed certificate. So click on “New Self signed”.

8. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
In this pop up window add all details these need to be specified exactly without errors anywhere
when giving SSLPEER values. On sender queue manager QM1 I providing distinguish names.
Then Extracting those file certificate

9. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
After extraction the qm1.arm file can be seen in SSL folder
On DestinationSideQueue Managerwe shouldcreate Keydatabase.So,create new Keydatabase.
Navigate to SSL folder of QM2.

10. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
Give password
All three files along with key data can be seen
Creating self signed certificate

11. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
Providing destination side Distinguished names.
Extract the file

12. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
The creation of .arm file for QM2 destination side can be seen
Now mutually exchange .arm files of both SSL of Source(QM1) to Destination (QM2)
To add the exchangedARMfilestoKeydatabase of SSL.We needtoperformbelow functions.
Opening keydatabase of QM1

13. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
Give password
Click on drop down menu to select Signed Certificate. Click ADD function
Confirmthe pathof QM1 -> SSL->selectqm2.arm
Here inQM1 we are addingqm2.arm file whichisexchangedacrossSSLfolders.

14. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
Give any label name
“ViewEdit”function helpsin viewingthe qm1label details.

15. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
For adding qm1.arm file into QM2 keydata base we open again SSL folder of QM2.

16. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
Select the drop down menu of signer certificate and click ADD function key

17. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
Give label name
These detailsof qm1.armfile inSSLof QM2.

18. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
InQM2 (destinationside) GivingSSLCIPHalgorithm usingALTER
We alsoALTERing channel forgivingSSLCIPHalgorithmonSource side
We needtogive SSLKEYRpath where we don’tmentionthe .kdbfileextensionforsourceside.

19. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
We needtogive SSLKEYRpath where we don’tmentionthe .kdb fileextensionfordestinationside.

20. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
On source side we provide SSLPEERvaluesof Destinationcertificate details.

21. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
On DestinationSide we provide SSLPEERvaluesof Source certificate details.

22. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.
By this we successfullyimplementedSSLbetweenTwoQueue Manager where sha256 algorithm
usedfor encryption on both sides.The destinationcertificate detailsis presentinsource side.The
source certificate detailspresentindestinationside.This way securedtunnel for communication
can be established.

23. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.

24. For educationandinternal consumptionpurposeonly.Thisis meantforOpensource.