| Author |
Message
|
| punnam |
 Posted: Fri May 13, 2005 1:03 pm Post subject: problem with SSLPEER attributes |
 |
|
Novice
Joined: 12 Apr 2005
Posts: 19
|
while i am creating SSL certificate request i gave zipcode also.Now when i am trying to define channels with
SSLPEER('CN=...,OU=....,O=....,L=.....,ST=....,PC=....,C=....')
PC refers to zipcode, getting error .What could be the problem?
any suggestions please |
|
| Back to top |
|
 |
| Michael Dag |
| Posted: Sun May 15, 2005 9:15 am Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
|
| Back to top |
|
|
| punnam |
| Posted: Mon May 16, 2005 6:58 am Post subject: |
|
|
Novice
Joined: 12 Apr 2005
Posts: 19
|
invvalid syntax for SSLPEER
if i remove PC attribute then it woorks fine. |
|
| Back to top |
|
|
| kevinf2349 |
| Posted: Mon May 16, 2005 8:48 am Post subject: |
|
|
Grand Master
Joined: 28 Feb 2003
Posts: 1311
Location: USA
|
|
| Back to top |
|
|
| Anirud |
| Posted: Mon May 16, 2005 9:27 am Post subject: |
|
|
Master
Joined: 12 Feb 2004
Posts: 285
Location: Vermont
|
This is interesting...
If we create a certificate request using gsk6ikm, it gives the option for ZipCode . I think I checked most of the manuals, if not all and I don't see any option to specify the ZipCode when we define/alter the SSLPEER value.
I usually leave the ZipCode value blank. |
|
| Back to top |
|
|
| vennela |
| Posted: Mon May 16, 2005 9:39 am Post subject: |
|
|
Jedi Knight
Joined: 11 Aug 2002
Posts: 4055
Location: Hyderabad, India
|
I issued a
| Code: |
dis chs (QM1.TO.QM2) all |
and I got the following output
| Code: |
CHANNEL(QM1.TO.QM2) XMITQ(QM2)
CONNAME(localhost(1415)) CURRENT
CHLTYPE(SDR) INDOUBT(NO)
LSTSEQNO(0) LSTLUWID(0000000000000000)
CURMSGS(0) CURSEQNO(0)
CURLUWID(41D8884210000001) STATUS(RUNNING)
LSTMSGTI( ) LSTMSGDA( )
MSGS(0) BYTSSENT(132)
BYTSRCVD(132) BATCHES(0)
BATCHSZ(50) HBINT(300)
NPMSPEED(FAST) CHSTATI(12.28.32)
CHSTADA(2005-05-16) BUFSSENT(1)
BUFSRCVD(1) LONGRTS(999999999)
SHORTRTS(10) JOBNAME(00000E2000000E30)
MCASTAT(RUNNING) STOPREQ(NO)
LOCLADDR(127.0.0.1(4340))
SSLPEER(CN=test, OU=HO, O=SITS, L=Location, S=AR, PostalCode=72712, C=US)
RQMNAME(QM2) |
From your post, looks like you are using PC for ZIP code. Change that to PostalCode as shown above and see if that resolves. |
|
| Back to top |
|
|
| punnam |
| Posted: Mon May 16, 2005 1:16 pm Post subject: |
|
|
Novice
Joined: 12 Apr 2005
Posts: 19
|
SSLPEER(CN=test, OU=HO, O=SITS, L=Location, S=AR, PostalCode=72712, C=US)
i tried above one but still same "Invalid Syntax for SSLPEER" |
|
| Back to top |
|
|
| kevinf2349 |
| Posted: Mon May 16, 2005 1:27 pm Post subject: |
|
|
Grand Master
Joined: 28 Feb 2003
Posts: 1311
Location: USA
|
What version of MQ and what platform?
What does the output from a :
| Quote: |
| dis chs (your.channel) all |
give you? |
|
| Back to top |
|
|
| bbburson |
| Posted: Mon May 16, 2005 1:46 pm Post subject: |
|
|
Partisan
Joined: 06 Jan 2004
Posts: 378
Location: Nowhere near a queue manager
|
From the WMQ Command Reference manual:
| Code: |
The possible attribute types supported are:
CN common name
T title
OU organizational unit name
O organization name
L locality name
S, ST, or SP state or province name
C country
WebSphere MQ will only accept upper case letters for the attribute types.
If any of the unsupported attribute types are specified in the SSLPEER
string, an error is output either when the attribute is defined or at run time
(depending on which platform you are running on), and the string is
deemed not to have matched the flowed certificate’s Distinguished Name.
|
Looks like PostalCode is not supported for WMQ definitions. |
|
| Back to top |
|
|
| Anirud |
| Posted: Tue May 17, 2005 7:42 am Post subject: |
|
|
Master
Joined: 12 Feb 2004
Posts: 285
Location: Vermont
|
| bbburson wrote: |
| Looks like PostalCode is not supported for WMQ definitions. |
I was wondering why do we have the ZipCode option when using GUI (gsk6ikm) to generate a certificate request.
punnam,
one solution would be to leave the SSLPEER value blank and alter the SSLCIPH (on SDR and RCVR channels) and SSLCAUTH (on the RCVR channel) values according to your requirements and then start the channel. That should start your channel.
I tried doing that and it works for me. I guess Vennela did the same thing.
My display chstatus shows
| Code: |
dis chs(qm1.qm2) all
20 : dis chs(qm1.qm2) all
AMQ8417: Display Channel Status details.
CHANNEL(QM1.QM2) XMITQ(QM2)
CONNAME(qm1.planetf1.com(1416)) CURRENT
CHLTYPE(SDR) INDOUBT(NO)
LSTSEQNO(0) LSTLUWID(0000000000000000)
CURMSGS(0) CURSEQNO(0)
CURLUWID(428A02C210000201) STATUS(RUNNING)
LSTMSGTI( ) LSTMSGDA( )
MSGS(0) BYTSSENT(272)
BYTSRCVD(272) BATCHES(5)
BATCHSZ(50) HBINT(300)
NPMSPEED(FAST) CHSTATI(11.03.21)
CHSTADA(2005-05-17) BUFSSENT(6)
BUFSRCVD(6) LONGRTS(999999999)
SHORTRTS(10) JOBNAME(000149C200000001)
MCASTAT(RUNNING) STOPREQ(NO)
LOCLADDR(127.0.0.1(3841))
SSLPEER(CN=qm1.planetf1.com,OU=Formula1,O=PlanetF1,L=MNT,ST=TX,PC=70710,C=US)
RQMNAME(QM2) |
|
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue May 17, 2005 8:17 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| Anirud wrote: |
| bbburson wrote: |
| Looks like PostalCode is not supported for WMQ definitions. |
I was wondering why do we have the ZipCode option when using GUI (gsk6ikm) to generate a certificate request. |
Because it's probably supported for other WebSphere products.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Anirud |
| Posted: Tue May 17, 2005 10:01 am Post subject: |
|
|
Master
Joined: 12 Feb 2004
Posts: 285
Location: Vermont
|
| jefflowrey wrote: |
| Anirud wrote: |
| bbburson wrote: |
| Looks like PostalCode is not supported for WMQ definitions. |
I was wondering why do we have the ZipCode option when using GUI (gsk6ikm) to generate a certificate request. |
Because it's probably supported for other WebSphere products. |
Might be. For some reason I wasn't thinking beyond MQ.
Thanks. |
|
| Back to top |
|
|
| punnam |
| Posted: Tue May 17, 2005 11:16 am Post subject: |
|
|
Novice
Joined: 12 Apr 2005
Posts: 19
|
i tried with the SSLPEER value blank and alter the SSLCIPH (on SDR and RCVR channels) and SSLCAUTH (on the RCVR channel) values .it works fine.
thank you very much for your support |
|
| Back to top |
|
|
|
|
