1.2.5 Securing the Connection with the Message Queue

MWS supports message queue security with AES. If the moab.messageQueue.secretKey property is set, then all messages MWS publishes on the message queue will be encrypted. Additionally, MWS can read messages from Moab Workload Manager that are encrypted with the same key using the MESSAGEQUEUESECRETKEY parameter. For more information, see 8.2  MWS Configuration.

Encryption is done with AES in CBC mode where inputs are padded with PKCS5 padding. Only 128-bit (16-byte) keys are supported. Keys should be encoded in Base64, for example:

moab.messageQueue.secretKey = "1r6RvfqJa6voezy5wAx0hw==" //must be a Base64-encoded 128-bit key

Important: If MWS is configured to encrypt the message queue and Moab HPC Suite is not (or vice versa) then the messages from Moab HPC Suite will be ignored. Furthermore, all attempts to access the MWS service resource will fail.

Related Topics 

• Chapter 4: Resources
• 4.6  Events
• 4.14  Notifications
• 4.13  Notification Conditions
• 6.2.12 Creating Events and Notifications
• 6.2  Plugin Developer's Guide
• 8.4.4 Fields: Events
• 6.6.6 Plugin Event Service
• 6.2.13 Handling Events
• 3.9  System Events