Sun Java System Directory Server Enterprise Edition 6.2 Installation Guide

Message Queue Client Certificate Validation

By default, clients of the Message Queue, such as the connectors and system manager, accept any SSL certificate that the Message Queue broker returns.

ProcedureTo Validate the Message Queue Client Certificate

  1. To override this setting and force Message Queue clients to validate the Message Queue broker’s certificate, edit:


  2. Add the following to the JVM arguments of each process in :

  3. Restart the Identity Synchronization for Windows daemon or service.

    The property should point to a JSEE keystore that trusts the broker certificate, for example, /etc/imq/keystore can be used on the machine where Core was installed because this is the same keystore used by the broker.