| Author |
Message
|
| saurabh25281 |
 Posted: Mon Jun 18, 2007 6:00 am Post subject: SSL issue with MQ version 6.0 |
 |
|
Centurion
Joined: 05 Nov 2006
Posts: 108
Location: Bangalore
|
Hi All,
I am trying to use SSL with my MQ Series setup. I am using the redbook redp4140.pdf for reference.
http://www.redbooks.ibm.com/redpapers/pdfs/redp4140.pdf
The steps which i can perform successfully are :
1. I was able to create a key repository for Queue Managers.
2. I was able to get a demo personal certificate without any problems.
3. I was able to export the installed personal certificate from the internet explorer certificate store.
Now, i am unable to import this exported certificate to the key repository which i created in Step 1. I am using the IBM Key Management tool.
The error which i get is "The specified Database is corrupted."
Can anyone help out with this one. |
|
| Back to top |
|
 |
| marcin.kasinski |
| Posted: Mon Jun 18, 2007 6:28 am Post subject: Re: SSL issue with MQ version 6.0 |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
What is format of your exported cert ?
_________________
Marcin |
|
| Back to top |
|
|
| saurabh25281 |
| Posted: Mon Jun 18, 2007 6:59 am Post subject: |
|
|
Centurion
Joined: 05 Nov 2006
Posts: 108
Location: Bangalore
|
| Its a "Personal Exchange Information" PKCS #12(*.PFX) file |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Mon Jun 18, 2007 8:43 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
|
| Back to top |
|
|
| saurabh25281 |
| Posted: Tue Jun 19, 2007 1:52 am Post subject: |
|
|
Centurion
Joined: 05 Nov 2006
Posts: 108
Location: Bangalore
|
Hi,
the first link mentions the JAVA_HOME variable, but this variable is not set on my machine. Should I add this parameter to the environment variables?
the second link is an older fix. I am using the latest version of MQ i.e. 6.0.2.1. Please suggest if i still need to go through the steps?
For now, as you have suggested i'll try out with self signed certificates.
Thanks in advance |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Tue Jun 19, 2007 2:44 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
Start with selfsigned cert. If you have problems let me know.
I will try to help you.
Alway give information what you did step by step and what the problem is.
_________________
Marcin |
|
| Back to top |
|
|
| chaitralip |
| Posted: Mon Jul 02, 2007 3:34 am Post subject: |
|
|
Novice
Joined: 16 May 2007
Posts: 24
|
Hi
Even I am facing the same problem, I tried it many times.
The error that I get is either of the two
"The specified Database is corrupted" or
"The specified files is not well formatted key database file"
Can someone help me |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Mon Jul 02, 2007 3:49 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
Post here step by step what you are doing and error messages.
_________________
Marcin |
|
| Back to top |
|
|
| chaitralip |
| Posted: Mon Jul 02, 2007 4:13 am Post subject: |
|
|
Novice
Joined: 16 May 2007
Posts: 24
|
Steps followed
1. Create a key repository for the QMgr
2. In Personal Certificate Clicked on Import
3. Selected PKCS12 and give the name and the path of the .pfx file
4. entered the passoword for it and clicked OK
After I click OK i get the errors
"The specified Database is corrupted" or
"The specified files is not well formatted key database file" |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Mon Jul 02, 2007 4:45 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
| chaitralip wrote: |
Steps followed
1. Create a key repository for the QMgr
2. In Personal Certificate Clicked on Import
3. Selected PKCS12 and give the name and the path of the .pfx file
4. entered the passoword for it and clicked OK
After I click OK i get the errors
"The specified Database is corrupted" or
"The specified files is not well formatted key database file" |
Now I discover it is not your thread.
It would be better to open new thread.
Open it and answer 2 additional questions.
What is this PKCS12 cert.
When you got first and when second error.
Any context ?
_________________
Marcin |
|
| Back to top |
|
|
|
|
