Author |
Message
|
WBI_user |
Posted: Wed Oct 29, 2008 4:45 am Post subject: Keyetore password prompt at explorer start up |
|
|
Partisan
Joined: 07 Aug 2001 Posts: 386
|
I am using WMQ V6 on Windows XP. I need to implement SSL security for MQ explorer. I have the keystore and certificate set up done. I also updated the explore "window/preference/WMQ Explorer/SSL certificate store" with the stor location and the password. Everything is working until I exit the explorer. When I restart the explorer, it is prompting me for keysotre and trust store password. There must be something wrong. I expect the explorer to have saved the password I entered and never have to prompt again. Any help ? |
|
Back to top |
|
 |
David.Partridge |
Posted: Wed Oct 29, 2008 5:02 am Post subject: |
|
|
 Master
Joined: 28 Jun 2001 Posts: 249
|
That seems to be the way it works - always prompts for passwords. I'm not aware of a way to make it remember them across sessions. _________________ Cheers,
David C. Partridge |
|
Back to top |
|
 |
gs |
Posted: Wed Oct 29, 2008 5:33 am Post subject: |
|
|
 Master
Joined: 31 May 2007 Posts: 254 Location: Sweden
|
The "Enter Password" feature only seems to be applicable when:
You pointed out the keystore(s) and want to connect using SSL without restarting MQ Explorer.
However, you must not try using the keystore(s) before entering the password or you must restart the app to make it use your password. |
|
Back to top |
|
 |
WBI_user |
Posted: Wed Oct 29, 2008 6:20 am Post subject: |
|
|
Partisan
Joined: 07 Aug 2001 Posts: 386
|
Quote: |
That seems to be the way it works - always prompts for passwords. I'm not aware of a way to make it remember them across sessions. |
From the security point of view, I don't want to give the keystore password to the users |
|
Back to top |
|
 |
David.Partridge |
Posted: Thu Oct 30, 2008 12:08 am Post subject: |
|
|
 Master
Joined: 28 Jun 2001 Posts: 249
|
Why not? It is after all their own personal key store with only their personal private key and related certificate in need of protection. All the other certificates in there will be either CA certs for validating QM certs, or QM certs (if self signed). _________________ Cheers,
David C. Partridge |
|
Back to top |
|
 |
PhilBlake |
Posted: Thu Oct 30, 2008 1:54 am Post subject: |
|
|
 Acolyte
Joined: 25 Oct 2005 Posts: 64
|
WBI_user wrote: |
Quote: |
That seems to be the way it works - always prompts for passwords. I'm not aware of a way to make it remember them across sessions. |
From the security point of view, I don't want to give the keystore password to the users |
For what it's worth, you can do this in MQ Explorer v7.
Phil |
|
Back to top |
|
 |
JLRowe |
Posted: Thu Oct 30, 2008 1:55 am Post subject: |
|
|
 Yatiri
Joined: 25 May 2002 Posts: 664 Location: South East London
|
Have you saved the stash file for the keystore? (this is an option in ikeyman) |
|
Back to top |
|
 |
|