| Author |
Message |
 Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
 Forum: IBM MQ Installation/Configuration Support Posted: Fri Jan 22, 2010 7:50 am Subject: Re: gsk7ikm did the trick |
most security departments tend to frown on keys/key stores being transported between servers
Yes, it's one of those... when doing the right thing is wrong.
Thank you for your reply. I tried to c ... |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Jan 22, 2010 7:14 am Subject: Re: gsk7ikm did the trick |
As far as I am aware, the GUI runs exactly the same commands as you would issue from the command line.
Not when it comes to changing personal certificate label. I quoted that in my first post:
It ... |
| Topic: connectivity problems: MQRC_Q_MGR_NAME_ERROR/MQRC_SSL_INITIA |
shelldweller
Replies: 3
Views: 5112
|
Forum: IBM MQ Installation/Configuration Support Posted: Thu Nov 12, 2009 7:36 am Subject: connectivity problems: MQRC_Q_MGR_NAME_ERROR/MQRC_SSL_INITIA |
There was something about MQCHLTAB and MQCHLLIB variables that MQ client didn't like. They were pointing to the default location channel definition file location:
MQCHLTAB=AMQCLCHL.TAB
MQCHLLIB=/v ... |
| Topic: connectivity problems: MQRC_Q_MGR_NAME_ERROR/MQRC_SSL_INITIA |
shelldweller
Replies: 3
Views: 5112
|
Forum: IBM MQ Installation/Configuration Support Posted: Wed Nov 11, 2009 3:45 pm Subject: connectivity problems: MQRC_Q_MGR_NAME_ERROR/MQRC_SSL_INITIA |
| I built a simple tool to troubleshoot MQ client connectivity. It was happily connecting where it should but today (or horror!) it doesn't work any more. I rebuilt it, reinstalled client tools and reco ... |
| Topic: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
shelldweller
Replies: 7
Views: 13729
|
Forum: IBM MQ API Support Posted: Tue Oct 27, 2009 8:04 am Subject: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
I thought it was supposed to be (no extension)
yes yes yes! that's it - no extension! 
No self-deprecation, please. - okay, next time I'll beg with dignity 
What you have is a locally ... |
| Topic: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
shelldweller
Replies: 7
Views: 13729
|
Forum: IBM MQ API Support Posted: Tue Oct 27, 2009 6:02 am Subject: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
You don't have MQSSLKEYR set properly.
Well... the env var is there; it's value is a correct file path readable by the effective user
$ echo $MQSSLKEYR
/var/mqm/ssl/key.kdb
$ ll /var/mqm/ssl/k ... |
| Topic: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
shelldweller
Replies: 7
Views: 13729
|
Forum: IBM MQ API Support Posted: Mon Oct 26, 2009 1:10 pm Subject: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
Did you look the reason code? - yes
Did you search google? - yes; checked every possible reason indicated here: http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/topic/com.ibm.mq.csqsao.doc/csq05 ... |
| Topic: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
shelldweller
Replies: 7
Views: 13729
|
Forum: IBM MQ API Support Posted: Mon Oct 26, 2009 12:43 pm Subject: MQRC_KEY_REPOSITORY_ERROR (on Linux) |
There must be a completely lame reason for me getting this failure but I've got a stack overflow in my head so I wonder if anyone can help.
After executing this simple code:
MQCONN(QMANAGER_ ... |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Wed Sep 09, 2009 6:59 am Subject: gsk7ikm did the trick |
| Adding personal certificate via GUI interface with gsk7ikm did the trick. The tool prompts me to change my label. Too bad there is no way to do this from command line. |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Aug 28, 2009 12:56 pm Subject: How to import personal certificate with gsk7cmd |
It lists it with that weird default name (which I cannot use as label) and there is no default registered.
I agree the normal procedure would be to create a cert request and then import it. For som ... |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Aug 28, 2009 10:26 am Subject: How to import personal certificate with gsk7cmd |
| The article makes sense but to set a default certificate I need a label! How would I find it for the certificate that shows on my list like this: firstname lastname's equifax secure inc. id? |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Aug 28, 2009 8:35 am Subject: How to import personal certificate with gsk7cmd |
I'll now need to figure out the label thing
This makes me a bit dizzy. I can import my file (without -target_type and -label options):
gsk7cmd -cert -import -file personal.pfx -type pkcs12 -targ ... |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Aug 28, 2009 7:57 am Subject: How to import personal certificate with gsk7cmd |
| Hm, omitting the label did the trick. I was quite sure I tried this command before posting my question and got a complaint from gsk7cmd that label was required. Well I must have done something else th ... |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Aug 28, 2009 7:30 am Subject: How to import personal certificate with gsk7cmd |
| I'm not quite sure what to do with the PEM file. The MQ Security guide seems to talk only about importing personal certificate in PKCS #12 format and gsk7cmd -type option accepts only 2 values: " ... |
| Topic: How to import personal certificate with gsk7cmd |
shelldweller
Replies: 19
Views: 38494
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Aug 28, 2009 6:50 am Subject: How to import personal certificate with gsk7cmd |
| No it's a real thing. I bought it from GeoTrust with Firefox and then exported it from there as PKCS#12 file. |
