| Author |
Message
|
| pbh |
 Posted: Tue Dec 12, 2006 7:05 am Post subject: SSL. Personal Certificate import failing from windows to AIX |
 |
|
Newbie
Joined: 11 Dec 2006
Posts: 3
Location: US
|
Hi, Need some help wrt the below mentioned problem.
I am trying to test SSL in AIX with a Demo certificate.
This Demo was downloaded from globalsign and installed through Internet explorer in a windows box. I am trying to export this to an AIX box for use on that.
I am using the following commands.
1. First I am using the utility on the Certificates tab of the internet Options of IE to export the certificate to a .PFX file.
2. Then I ftp the file over to the AIX box.
3. I already have a key DB on AIX which I use.
SO I use
gsk6cmd -cert -import -file /var/mqm/pb/ssl/ibmwebspheremqncenx623.pfx -pw <password> -type pkcs12 -target /var/mqm/qmgrs/NCENX623/ssl/key.kdb -target_pw cms -target_type cms
After this I am getting the following error -
" An error occurred while getting key information of the database. "
I have already use this key DB for other purposes, so I do not understand this error.
Can anybody shed any light on this.
thks
_________________
pbh |
|
| Back to top |
|
 |
| kats |
| Posted: Tue Dec 12, 2006 11:49 am Post subject: |
|
|
Voyager
Joined: 20 Apr 2006
Posts: 78
|
| Quote: |
| 2. Then I ftp the file over to the AIX box. |
Make sure you ftp in binary format. |
|
| Back to top |
|
|
| pbh |
| Posted: Tue Dec 12, 2006 12:16 pm Post subject: |
|
|
Newbie
Joined: 11 Dec 2006
Posts: 3
Location: US
|
I did that. checked everything.
Not getting any clue to the error message.
looks relatively simple. just tranferring a .PFX containing the personal and the certificate chain over to the AIX box, and trying to import this to the key DB over there.
if somebody can vouch that the steps mentioned are correct, then I would go to the next step of finding about the versions of gskit,java, etc.
_________________
pbh |
|
| Back to top |
|
|
| kats |
| Posted: Tue Dec 12, 2006 1:22 pm Post subject: |
|
|
Voyager
Joined: 20 Apr 2006
Posts: 78
|
| Quote: |
| gsk6cmd -cert -import -file /var/mqm/pb/ssl/ibmwebspheremqncenx623.pfx -pw <password> -type pkcs12 -target /var/mqm/qmgrs/NCENX623/ssl/key.kdb -target_pw cms -target_type cms |
I did that long ago between AIX and NT machine.
After getting the cert file on AIX server, I used:
gsk6cmd -cert -add -db key.kdb -pw <password> -label ibmwebspheremqqmgrname -file XXXXX.arm -format ascii
Note that
I saved the cert in .arm format while I am on windows box.(XXXXX.arm)
I used ADD instead of IMPORT
I also Gave label.
Just out of curosity:
Can't you use self signed CERT?  . They are free. Does your Co. policy says to go with Global sign or Verisign. |
|
| Back to top |
|
|
| pbh |
| Posted: Tue Dec 12, 2006 2:18 pm Post subject: |
|
|
Newbie
Joined: 11 Dec 2006
Posts: 3
Location: US
|
hmm. I think maybe I am not able to convey it properly.
Actually I have an XP system.
I am Exporting a 'Personal certificate', which will also have a Private key attached to the Certificate; from the Microsoft Certificate store with Internet explorer. This will only export it into PKCS12 fromat, i.e. .pfx/.p12.
This file I am then ftping to AIX.
I cannot DO an 'ADD' on AIX with this pfx file, as this file also has a private key attached to it. so we can only Import it and not ADD it.
So, ideally I am using the Windows box just to download the Demo Certificate and not use it on that at all. Instead I am using this certificate between 2 AIX boxes.
_________________
pbh |
|
| Back to top |
|
|
| kats |
| Posted: Tue Dec 12, 2006 2:38 pm Post subject: |
|
|
Voyager
Joined: 20 Apr 2006
Posts: 78
|
Alrihgt...You were very clear. I didn't pick that. Sorry.
I understand what you're saying. I always used gskit and never did this way. But I'll curiously monitor your post to find the answer myself. |
|
| Back to top |
|
|
|
|
