| Author |
Message
|
| kailashbawane |
 Posted: Wed Oct 22, 2008 10:37 pm Post subject: SSL cert |
 |
|
Acolyte
Joined: 13 Jun 2007
Posts: 51
Location: Pune,INDIA
|
Hi Friends, 
I am first time setting up SSL certificate on AIX . I have to install
new cerificate but befor tht i want to know the expiry date of old
cerificat which is already installed.
Can anyone tells, how to check the expiry date of the certificate ?
And what other thing we need to know for checking the cerificate ?
If anyone have a stepwise SSL cert installation Document , pls send it on
kailashbawane@gmail.com
Your help is appreciating.!! Thanks !!
_________________
ITO- MQ ISE.
" Slow n steady always win the race. " |
|
| Back to top |
|
 |
| gs |
| Posted: Wed Oct 22, 2008 11:13 pm Post subject: |
|
|
Master
Joined: 31 May 2007
Posts: 254
Location: Sweden
|
|
| Back to top |
|
|
| David.Partridge |
| Posted: Wed Oct 22, 2008 11:18 pm Post subject: |
|
|
Master
Joined: 28 Jun 2001
Posts: 249
|
For example on Unix:
| Code: |
| gsk7cmd -cert -details -db <keystore> -pw <password> -label ibmwebspheremq<qmname> |
Or use a tool like openssl to display the content of the loose certificate file.
_________________
Cheers,
David C. Partridge |
|
| Back to top |
|
|
| masteringmq |
| Posted: Wed Jan 21, 2009 6:57 pm Post subject: |
|
|
Master
Joined: 20 Oct 2008
Posts: 200
|
If you are planning to write a script on unix to display the cert detail:
gsk${gskv}cmd -cert -details -label "$cert" -db key.kdb -pw "$dpasswd" |
|
| Back to top |
|
|
| jeevan |
| Posted: Fri Feb 06, 2009 2:29 pm Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
| David.Partridge wrote: |
For example on Unix:
| Code: |
| gsk7cmd -cert -details -db <keystore> -pw <password> -label ibmwebspheremq<qmname> |
Or use a tool like openssl to display the content of the loose certificate file. |
The only problem at the beginning is why a particular verb such as add or import or receive. why add and wny not import but will get clear once done.
Implementing this can be complicated, and with new users this tends to be due to difficulties with knowing what they want to achieve; or difficulties knowing which of the many similar-sounding GSKit verbs (e.g. import, add or receive) is appropriate for their uses
|
|
| Back to top |
|
|
| kailashbawane |
| Posted: Sat Feb 14, 2009 10:30 am Post subject: |
|
|
Acolyte
Joined: 13 Jun 2007
Posts: 51
Location: Pune,INDIA
|
I am adding ssl cert , I am getting following error::
"An attempt to receive the certificate has failed.
All the signer certificate must exist in the key database"
Why is this error occures ? Pls suggest..
_________________
ITO- MQ ISE.
" Slow n steady always win the race. " |
|
| Back to top |
|
|
| exerk |
| Posted: Sat Feb 14, 2009 11:56 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| kailashbawane wrote: |
I am adding ssl cert , I am getting following error::
"An attempt to receive the certificate has failed.
All the signer certificate must exist in the key database"
Why is this error occures ? Pls suggest.. |
Because "All the signer certificates must exist in the key database"! Presumably you are importing a certificate signed by an 'internal' CA, and you have not imported the 'internal' CA's signer certificate first.
It never ceases to amaze me just how little information can be contained in an error message 
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
|
|
