Home

 

Disabling SSL on clustered queue managers and channels

 

If you want to disable SSL in your cluster, follow these steps:

1. Set the value of the SSLCIPH parameter to ' ' (an empty string in single quotes), or *NONE on iSeries.

2. Run the RESET CLUSTER command (RSTMQMCL CLUSTER on iSeries) against each queue manager pointing to the other queue managers in the cluster. That is, if you have two queue managers in your cluster, run the RSTMQMCL command four times in total, twice for each queue manager.

   The RESET CLUSTER command replaces the auto-defined cluster send channels with the newer version. For example:

   On QM1:

   RESET CLUSTER(clustername) QMNAME(QM1) ACTION(FORCEREMOVE)QUEUES(NO)
   RESET CLUSTER(clustername) QMNAME(QM2) ACTION(FORCEREMOVE)QUEUES(NO)

   On QM2:

   RESET CLUSTER(clustername) QMNAME(QM2) ACTION(FORCEREMOVE)QUEUES(NO)
   RESET CLUSTER(clustername) QMNAME(QM1) ACTION(FORCEREMOVE)QUEUES(NO)

   On iSeries, the equivalent command is:

   RSTMQMCL CLUSTER(CLUSTER.NAME) QMNAME(QM1)ACTION(*FRCRMV) MQMNAME(QM1) QUEUES(*NO)     
   RSTMQMCL CLUSTER(CLUSTER.NAME) QMNAME(QM2)ACTION(*FRCRMV) MQMNAME(QM1) QUEUES(*NO)
   RSTMQMCL CLUSTER(CLUSTER.NAME) QMNAME(QM1)ACTION(*FRCRMV) MQMNAME(QM2) QUEUES(*NO)
   RSTMQMCL CLUSTER(CLUSTER.NAME) QMNAME(QM2)ACTION(*FRCRMV) MQMNAME(QM2) QUEUES(*NO)  

3. Run the REFRESH CLUSTER command (RFRMQMCL CLUSTER on iSeries) to reinstate the queue managers into the cluster. For example:

   On QM1:

   REFRESH CLUSTER(clustername) REPOS(NO) 

   On QM2:

   REFRESH CLUSTER(clustername) REPOS(NO) 

   On iSeries, the equivalent command is:

   RFRMQMCL CLUSTER(CLUSTER.NAME) MQMNAME(QM1) REPOS(*NO) 
   RFRMQMCL CLUSTER(CLUSTER.NAME) MQMNAME(QM2) REPOS(*NO) 

 

Parent topic:

Using SSL

qc13390_

 

Home