By enforcing transport encryption in bus configuration
settings, you do not need to configure individual chains on the bus
to meet requirements.
Note: The use of permitted transports requires all members
of the bus to be at the WebSphere® Application
Server Version 6.1 or later version. Configuring using administrative
console helps to prevent any errors. However if a bus is configured
to use permitted transport and has a previous level bus member, the
runtime operations ignore the setting and issue a warning.
The transport security functionality addresses the following issues:
- If you want to prevent the use of specific protocols to attach
to the bus the administrator would need to go round each server in
the bus disabling the relevant chains.
- Adding a new server as a bus member requires the administrator
to disable channels on that server.
- Two different buses that have different requirements on the chains
being used cannot share a server.
You can enforce transport encryption with a bus configuration setting
on a bus with Version 6.1 or later bus members. This setting is independent
of the bus security setting, so chains can be locked down without
enabling bus security. The use of permitted chains has three settings:
- All defined messaging transport chains
- Any messaging transport chain that contain the SSL channel
- Only messaging transport chains in a specific list
When the use of permitted chains is enabled, the bus only allows
access to the permitted chains. When the bus is set to be secure,
by default you can only have chains that use the SSL channel. If the
bus is not set to be secure, the default setting allows access for
all chains.
When the use of permitted chains is enforced and a protocol is
not specified for inter-bus communications then InboundSecureMessaging
is assumed instead of InboundBasicMessaging. This assumption can be
avoided by setting the protocol attribute in the bus configuration.
If InboundSecureMessaging is not a permitted chain then an error occurs.
To configure transport security for your bus refer to Administering transport chains.