Secure Sockets Layer (SSL) support

The Secure Sockets Layer (SSL) protocol provides channel security, with protection against eavesdropping, tampering, and impersonation.

SSL is an industry-standard protocol that provides a data security layer between application protocols and the communications layer, usually TCP/IP. The SSL protocol was designed by the Netscape Development Corporation, and is widely deployed in both Internet applications and intranet applications. SSL defines methods for data encryption, server authentication, message integrity, and client authentication for a TCP/IP connection.

SSL uses public key and symmetric techniques to provide the following security services:

Message privacy

SSL uses a combination of public-key and symmetric-key encryption to ensure message privacy. Before exchanging messages, an SSL server and an SSL client perform an electronic handshake during which they agree to use a session key and an encryption algorithm. All messages sent between the client and the server are then encrypted. Encryption ensures that the message remains private even if eavesdroppers intercept it.

Message integrity

SSL uses the combination of a shared secret key and message hash functions. This ensures that nothing changes the content of a message as it travels between client and server.

Mutual authentication

During the initial SSL handshake, the server uses a public-key certificate to convince the client of the server's identity. Optionally, the client can also exchange a public-key certificate with the server to ensure the authenticity of the client.

This book describes changes to the setmqaut, dspmqaut, dmpmqaut, rcrmqobj, rcdmqimg, and dspmqflscommands to support the SSL authentication information object, authinfo. It also describes the amqmcert command for managing certificates.