| Author |
Message
|
| My_Quest |
 Posted: Tue Aug 09, 2005 4:56 pm Post subject: openssl and GSkit error.... |
 |
|
Novice
Joined: 07 May 2005
Posts: 24
|
Hi all,
I am planning to set up channels using MQ SSL with self-signed certificates.One of my QMGR is on AIX and other on HP-UX(itanium) platform.I am using openssl for the HP-UX environment and GSkit for the AIX.I have created a slef-signed certificate on AIX (cert.arm) and through ftp I appended it to the cacert.pem on HP-UX.And when I tried to ftp the cacert.pem on HP-UX and add it to the database as signer certificate to cert.arm on AIX...I see this error.
Error message:
"The validity period does not include today or does not fall within its issuer's validity period".
This is the first time we are creating the certificates on both sides.
Can any one help me with this.Thank You. |
|
| Back to top |
|
 |
| harwinderr |
| Posted: Tue Aug 09, 2005 9:22 pm Post subject: |
|
|
Voyager
Joined: 29 Jan 2002
Posts: 90
|
First of all, why would you use openssl on HP-UX system to establish SSL channels. As far as I know, MQ on HP-UX (itanium) uses GSKit and not OpenSSL.
The steps that you are trying to carry out appears to be OpenVMS specific. Use GSKit on both the systems to create certificates. |
|
| Back to top |
|
|
| My_Quest |
| Posted: Wed Aug 10, 2005 5:03 am Post subject: Openssl and GSkit... |
|
|
Novice
Joined: 07 May 2005
Posts: 24
|
Hi,
IBM does not support MQ for HP-UX(itanium) and it is provided by other company.This company asked us to use openssl only.I guess there is no way I can use GSkit.Thank You. |
|
| Back to top |
|
|
| Tibor |
| Posted: Wed Aug 10, 2005 1:47 pm Post subject: |
|
|
Grand Master
Joined: 20 May 2001
Posts: 1033
Location: Hungary
|
You can create your key files (cert, stash) on any box, because these are portable thru Unix platforms.
Tibor |
|
| Back to top |
|
|
| My_Quest |
| Posted: Thu Aug 11, 2005 5:19 am Post subject: openssl and gskit error... |
|
|
Novice
Joined: 07 May 2005
Posts: 24
|
Hi Tibor,
Thank You for the reply.As we purchased the MQ software from a diferent company they do not have GSkit along with the MQ 5.3 Server version.They follow openssl only for ssl between channels.So I guess there is no way I can use GSkit.Thank You |
|
| Back to top |
|
|
|
|
