MQSeries.net :: View topic - WebSphere Message Broker 6.0 and SSL certificate issue

qveston

Hello,

we have generated an SSL certificate for the message broker using following commands:

[code]
keytool -genkey -keystore /home/mqsi/.keystore -alias broker -keyalg "RSA" -keysize 1024 -sigalg "SHA1withRSA"
keytool -certreq -keystore /home/mqsi/.keystore -alias broker -file broker.csr
[/code]

The broker.csr file was delivered to CA and trustedcert.cer file was received from them. After which following commands were issued:

[code]
keytool -delete -keystore /home/mqsi/.keystore -alias broker
keytool -import -keystore /home/mqsi/.keystore -file trustedcert.cer -alias broker
mqsichangeproperties BROKER -b httplistener -o HTTPSConnector -n keystoreFile -v /home/mqsi/.keystore
mqsichangeproperties BROKER -b httplistener -o HTTPSConnector -n keystorePass -v **********
mqsistop BROKER
mqsistart BROKER
mqsistop BROKER
mqsistart BROKER
[/code]

For some reason the SSL is not working as expected. When web browser is used for connecting to an HTTPInput node on the broker, an error message "ssl_error_no_cypher_overlap" is displayed.

Could some one help me out if there is something fundamentally wrong in the way the certificate is created and configured to the broker or a way to trouble shoot this?

We have already used trace on HTTPSConnector component but it displayed no error.