| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| SSL Certificates, duncan tutorial |
« View previous topic :: View next topic » |
| Author |
Message
|
| Bruce Barclay |
 Posted: Wed Feb 19, 2003 11:23 am Post subject: SSL Certificates, duncan tutorial |
 |
|
Newbie
Joined: 10 Feb 2003
Posts: 1
Location: Ottawa, Canada
|
I tried the tutorial and was only partially successful in obtaining a valid certificate. Using globalsign I had much problems in doing the download to my e-mail site. Kept getting server errors?? Next I tried another email site and was able to get the certificate but when I tried loading it to MQ using amqmcert, I got error message saying certificate expired when it clearly had not expired. I also tried Thawte and got the same message. Here it is:
5724-B41 (C) Copyright IBM Corp. 1994, 2002. ALL RIGHTS RESERVED.
Using CURRENT_USER for default system stores.
Enumerating Certificate Stores:
Name: www.forward.co.za
CA: Thawte Test CA Root
AMQ9630: An expired SSL certificate was loaded.
Any clues as to what I'm doing wrong???
Thanx for any help. Cheers. BB.
_________________
Bruce W. Barclay
Intercom DPC Ltd.
bruce.barclay@sympatico.ca
613-794-8423 |
|
| Back to top |
|
 |
| kdavis |
| Posted: Wed Feb 19, 2003 11:48 am Post subject: Re: SSL Certificates, duncan tutorial |
|
|
Novice
Joined: 09 Dec 2002
Posts: 13
|
| Bruce Barclay wrote: |
I tried the tutorial and was only partially successful in obtaining a valid certificate. Using globalsign I had much problems in doing the download to my e-mail site. Kept getting server errors?? Next I tried another email site and was able to get the certificate but when I tried loading it to MQ using amqmcert, I got error message saying certificate expired when it clearly had not expired. I also tried Thawte and got the same message. Here it is:
5724-B41 (C) Copyright IBM Corp. 1994, 2002. ALL RIGHTS RESERVED.
Using CURRENT_USER for default system stores.
Enumerating Certificate Stores:
Name: www.forward.co.za
CA: Thawte Test CA Root
AMQ9630: An expired SSL certificate was loaded.
Any clues as to what I'm doing wrong???
Thanx for any help. Cheers. BB. |
I had same thing happen, sort of. Set the clock on the (test -- I assume) server ahead one day. Then back tomorrow. Simple, stupid, but it worked.
KD |
|
| Back to top |
|
|
| mfeenstra |
| Posted: Sun Feb 23, 2003 12:03 am Post subject: |
|
|
Novice
Joined: 03 Jul 2002
Posts: 12
|
I've had a similar problem with amqmcert and the GUI certificate management utilities complaining about expired certificates when the certificate should be valid. I currently have a PMR open with IBM and hursley is providing a debug patch to get more information about this problem.
I fixed the problem by deleting the %MQ_HOME%\qmgrs\QMGRNAME\ssl\key.sto file. Simply running "amqcert -l -m QMGRNAME" will recreate the store file. When it is recreated, you shouldn't have any expiration problems when you try to import or assign certificates.
_________________
Matt Feenstra
IBM Certified Specialist - MQSeries |
|
| Back to top |
|
|
| Meow |
| Posted: Wed Aug 13, 2003 9:12 pm Post subject: |
|
|
Voyager
Joined: 25 Jun 2003
Posts: 95
|
I tried to fix the error "AMQ9630" using the way mentioned by you. I deleted the "key.sto " file on QM1 and tried to assign the SSL certificate but the problem still persists. Can you please help me out regarding this issue?
Thank you very much in advance.
Paruvan |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
