Providing your own link level security

We can provide your own link level security services. Writing your own channel exit programs is the main way to provide your own link level security services.

Channel exit programs are introduced in Channel exit programs. The same topic also describes the channel exit program that is supplied with IBM MQ for Windows (the SSPI channel exit program). This channel exit program is supplied in source format so that we can modify the source code to suit we requirements. If this channel exit program, or channel exit programs available from other vendors, do not meet we requirements, we can design and write your own. This topic suggests ways in which channel exit programs can provide security services. For information about how to write a channel exit program, see Writing channel-exit programs.

• Link level security using a security exit
  Security exits normally work in pairs; one at each end of a channel. They are called immediately after the initial data negotiation has completed on channel startup.
• Link level security using a message exit
  A message exit can be used only on a message channel, not on an MQI channel. It has access to both the transmission queue header, MQXQH, which includes the embedded message descriptor, and the application data in a message. It can modify the contents of the message and change its length.
• Link level security using send and receive exits
  Send and receive exits can be used on both message and MQI channels. They are called for all types of data that flow on a channel, and for flows in both directions.

Parent topic: Link level security