Windows 2008上的MSMQ-无法验证发送到队列的消息的数字签名 [英] MSMQ on Windows 2008 - failed to verify digital signature of a message sent to queue

问题描述

我有一个旧的基于C ++的客户端应用程序，该应用程序将消息写入MSMQ.在运行MSMQ服务的Windows 2000服务器上，此方法运行良好.

最近，我们移至Windows 2008服务器.现在，当我指向发送MSMQ消息的客户端应用程序时，它失败了，并且在服务器上，Windows日志中有一个事件:

事件2196，MSMQ:

"消息队列未能验证发送到队列myserver \ private $ \ myqueue的消息的数字签名.邮件被拒绝.如果发件人请求，将发送否定的到达确认.每600个事件最多记录一次 秒.要更改此设置，请将\ HKLM \ Software \ Microsoft \ MSMQ \ Parameters \ Event2196注册表值设置为所需的时间(以秒为单位)."

MSMQ已安装在工作组中模式.如这里的建议: http://blogs.msdn.com/b/motleyqueue/archive/2007/09/29/authentication-and-msmq4.aspx ， 设置 WeakHashAlgUpgrade和 WeakHashAlgorithms键允许使用弱哈希算法和重新启动的MSMQ服务.我仍然不断收到此错误.

有人可以帮我吗 在2008服务器上获取MSMQ服务以接受来自客户端的消息.

谢谢

解决方案

能否请您确认发送的是哪种消息?

您是否在发送带有身份验证或加密标志的邮件?

如果是，您是否设置目标队列属性以匹配这些消息设置?

欢呼

John Breakwell

Hi,

I  have an old C++ based client application which writes messages to the MSMQ. This worked well on a Windows 2000 server which ran the MSMQ service.

Recently, we moved to a Windows 2008 server. Now when I point the client application which sends MSMQ messages, it fails and on the server there is an event in the windows log:

Event 2196, MSMQ:

"Message Queuing failed to verify digital signature of a message sent to queue myserver\private$\myqueue. The message was rejected. A negative arrival acknowledgement will be sent if requested by the sender. This event is logged at most once per 600 seconds. To change this setting, set \HKLM\Software\Microsoft\MSMQ\Parameters\Event2196 registry value to desired time in seconds."

MSMQ is install in workgroup mode. As suggested here: http://blogs.msdn.com/b/motleyqueue/archive/2007/09/29/authentication-and-msmq4.aspx , I set the WeakHashAlgUpgrade and WeakHashAlgorithms keys to allow weak hash algorithms and restarted MSMQ service. Still I keep getting this error.

Could anyone help me with getting the MSMQ service on the 2008 server to accept the messages from the client.

Thanks

解决方案

Could you please confirm what sort of messages you are sending?

Are you sending messages with the authentication or encryption flags set?

If so, are you setting the destination queue properties to match these message settings?

Cheers

John Breakwell

这篇关于Windows 2008上的MSMQ-无法验证发送到队列的消息的数字签名的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！