Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Connect to QM deployed on OPenShift #519

Open
andrescolodrero opened this issue Feb 22, 2023 · 1 comment
Open

Connect to QM deployed on OPenShift #519

andrescolodrero opened this issue Feb 22, 2023 · 1 comment

Comments

@andrescolodrero
Copy link

HI,
i deployed the mq container in OPenshift, connected to the web console and MQ Explorer via nodePort (connecting to a kubernetes node).

Now i would like to use a channel to use HTTPS/SSL.
how should i create a route to connect from MQ Explorer?

i create the route:
https://mqdev-ibm-mq-qm-mqdev.apps.mydomain.com (where "mqdev" is the name of the queue manager)
target port: 1414
and for the web:
https://mqdev-ibm-mq-web-mqdev.apps.mydomain.com
target port: 9443

Any of those routes work on MQ Explorer (error MQ 2009)

Other test:
if i open this url in the brownser: https://mqdev-ibm-mq-qm-mqdev.apps.mydomain.com
i got this on mq:
the data received from host '10.131.0.2' on channel '????' is not valid. [CommentInsert1(10.131.0.2), CommentInsert2(TCP/IP), CommentInsert3(????)]
2023-02-22T18:26:40.509Z AMQ9999E: Channel '????' to host '10.131.0.2' ended abnormally. [CommentInsert1(????), CommentInsert2(688), CommentInsert3(10.131.0.2)]

Then i tried the same URL for mq explorer:
QM: mqdev
host: mqdev-ibm-mq-qm-mqdev.apps.mydomain.com
port: 443
CHANEL: SSL_CHANNEL

BUt from MQ Explorer, i never get an error.
I check those documents, MAybe MQ Explorer cant connect over https?
https://www.ibm.com/docs/en/ibm-mq/9.1?topic=containers-connecting-queue-manager-deployed-in-openshift-cluster

@vgavinash
Copy link
Contributor

@andrescolodrero the details you have used in MQ Explorer is correct. i.e.,

QM: mqdev
host: mqdev-ibm-mq-qm-mqdev.apps.mydomain.com
port: 443
CHANEL: SSL_CHANNEL

Assuming you have setup the tls certificates in mq key repository correctly and the same has been setup on the queue manager side, what other parameter are you using on the MQ Explorer end? Did you try OutboundSNI?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants