ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » how can view the certificate expiry date

Post new topic  Reply to topic
 how can view the certificate expiry date « View previous topic :: View next topic » 
Author Message
mqstd
PostPosted: Tue Jul 09, 2013 11:38 am    Post subject: how can view the certificate expiry date Reply with quote

Novice

Joined: 28 Jul 2011
Posts: 19

Hi,

some one installed ssl on MQ..now i want to verify the certificate expiry date on queue manager..could you please help me to get that details

Thanks in advance
mqstd
Back to top
View user's profile Send private message
exerk
PostPosted: Tue Jul 09, 2013 1:25 pm    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

Run the appropriate gsk*cmd command against the key store to interrogate the queue manager personal certificate, or use the GUI (dependent on platform) to do the same.

Where * is the version installed
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
bruce2359
PostPosted: Tue Jul 09, 2013 7:55 pm    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9394
Location: US: west coast, almost. Otherwise, enroute.

Moved to Security forum.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
zpat
PostPosted: Tue Jul 09, 2013 11:50 pm    Post subject: Reply with quote

Jedi Council

Joined: 19 May 2001
Posts: 5849
Location: UK

Copy the keystore to your PC and use the MQ key management tool.

Much easier than breaking all your fingernails with cryptic unix commands.
Back to top
View user's profile Send private message
Tibor
PostPosted: Wed Jul 10, 2013 4:53 am    Post subject: Reply with quote

Grand Master

Joined: 20 May 2001
Posts: 1033
Location: Hungary

An example, components: AIX + MQv7 + Java5
Code:
$ cd /var/mqm/qmgrs/TESTQMGR/ssl
$ export JAVA_HOME=/usr/java5_64/jre

Listing the labels:
Code:
$ gsk7cmd -cert -list all -db key.kdb -type cms -pw 'pass'

Display an entry:
Code:
$ gsk7cmd -cert -details -db key.kdb -type cms -pw 'pass' -label ibmwebspheremqtestqmgr


Setting for JAVA_HOME would be different, as soon as password, label, etc.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » how can view the certificate expiry date
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.