MQSeries.net :: View topic - SSL:Copy MQ CA Certificate from one server to another server

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » SSL:Copy MQ CA Certificate from one server to another server

Goto page Previous 1, 2

SSL:Copy MQ CA Certificate from one server to another server

« View previous topic :: View next topic »

Author

Message

exerk

Posted: Thu Jan 24, 2013 5:08 am Post subject:

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

zpat wrote:

Why not join me in the 21st century and use the MQ key management GUI?

And if the OP's installation disallows use of it?

Finally got around to moving this to the appropriate forum...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.

fjb_saper

Posted: Thu Jan 24, 2013 7:17 am Post subject:

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

You need to check what you are doing.
For the qmgr certificate a simple export is not going to do it. You need more than just the public cert for the qmgr. You also need the private key.

Read up there are ways to do this the right way.
Have fun

_________________
MQ & Broker admin

ALCSALCS

Posted: Mon Jan 28, 2013 12:50 am Post subject:

Acolyte

Joined: 14 Apr 2002
Posts: 61

Many thanks to everyone for the help

Finally the problem was solved using the old files (key database) with the new qmgr but in the qm.ini for both qmgrs the following two parameters were required
.

SSL:
OCSPAuthentication=OPTIONAL
OCSPCheckExtensions=NO

Thanks

exerk

Posted: Mon Jan 28, 2013 2:02 pm Post subject:

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

ALCSALCS wrote:

SSL:
OCSPAuthentication=OPTIONAL
OCSPCheckExtensions=NO

Which I believe had the queue manager been migrated would have been done automatically...but you didn't migrate it, you recreated it and I missed that - doh!
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.

Display posts from previous:

Goto page Previous 1, 2

Page 2 of 2

MQSeries.net Forum Index » IBM MQ Security » SSL:Copy MQ CA Certificate from one server to another server

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP