mq-container icon indicating copy to clipboard operation
mq-container copied to clipboard

Connect to QM deployed on OPenShift

Open andrescolodrero opened this issue 2 years ago • 1 comments

HI, i deployed the mq container in OPenshift, connected to the web console and MQ Explorer via nodePort (connecting to a kubernetes node).

Now i would like to use a channel to use HTTPS/SSL. how should i create a route to connect from MQ Explorer?

i create the route: https://mqdev-ibm-mq-qm-mqdev.apps.mydomain.com (where "mqdev" is the name of the queue manager) target port: 1414 and for the web: https://mqdev-ibm-mq-web-mqdev.apps.mydomain.com target port: 9443

Any of those routes work on MQ Explorer (error MQ 2009)

Other test: if i open this url in the brownser: https://mqdev-ibm-mq-qm-mqdev.apps.mydomain.com i got this on mq: the data received from host '10.131.0.2' on channel '????' is not valid. [CommentInsert1(10.131.0.2), CommentInsert2(TCP/IP), CommentInsert3(????)] 2023-02-22T18:26:40.509Z AMQ9999E: Channel '????' to host '10.131.0.2' ended abnormally. [CommentInsert1(????), CommentInsert2(688), CommentInsert3(10.131.0.2)]

Then i tried the same URL for mq explorer: QM: mqdev host: mqdev-ibm-mq-qm-mqdev.apps.mydomain.com port: 443 CHANEL: SSL_CHANNEL

BUt from MQ Explorer, i never get an error. I check those documents, MAybe MQ Explorer cant connect over https? https://www.ibm.com/docs/en/ibm-mq/9.1?topic=containers-connecting-queue-manager-deployed-in-openshift-cluster

andrescolodrero avatar Feb 22 '23 18:02 andrescolodrero

@andrescolodrero the details you have used in MQ Explorer is correct. i.e.,

QM: mqdev
host: mqdev-ibm-mq-qm-mqdev.apps.mydomain.com
port: 443
CHANEL: SSL_CHANNEL

Assuming you have setup the tls certificates in mq key repository correctly and the same has been setup on the queue manager side, what other parameter are you using on the MQ Explorer end? Did you try OutboundSNI?

vgavinash avatar Jun 14 '23 09:06 vgavinash