ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » SSL key repository: password stash file absent or unusable

Post new topic  Reply to topic Goto page 1, 2  Next
 SSL key repository: password stash file absent or unusable « View previous topic :: View next topic » 
Author Message
Tdak
PostPosted: Mon Aug 18, 2014 3:32 am    Post subject: SSL key repository: password stash file absent or unusable Reply with quote

Novice

Joined: 30 Jun 2008
Posts: 18
Location: South Africa

Hi

I'm having issues with the ssl communication between one qm we managing and one qm hosted in London. We have managed to import the certificate into the keystore we referencing on SSLKEYR on the local qm. However we get the following error while trying to start the channel with SSL enabled:

AMQ9660: SSL key repository: password stash file absent or unusable.

Could you kindly advise on what the issue might be as I followed the instruction on the below link except for step 3 and 4 which I'm struggling to find the CHGMQM command :

http://www-01.ibm.com/support/docview.wss?uid=swg21236773

I also wanted to find out how step 3 can be run

Thank you in this regard
TdaK
Back to top
View user's profile Send private message MSN Messenger
exerk
PostPosted: Mon Aug 18, 2014 3:51 am    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

Platform and WMQ/IBM MQ version please. That Support Doc references iSeries, but I'm making no assumptions.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
Tdak
PostPosted: Mon Aug 18, 2014 3:59 am    Post subject: Reply with quote

Novice

Joined: 30 Jun 2008
Posts: 18
Location: South Africa

Apologies for missing that - please find below

Name: WebSphere MQ
Version: 7.0.1.4
CMVC level: p701-104-110114
BuildType: IKAP - (Production)


OS:

SunOS 5.10 Generic_147441-19 i86pc i386 i86pc
Back to top
View user's profile Send private message MSN Messenger
mqjeff
PostPosted: Mon Aug 18, 2014 4:35 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

And, is there a .sth file in teh same directory as the kdb file?
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Mon Aug 18, 2014 4:55 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

mqjeff wrote:
And, is there a .sth file in teh same directory as the kdb file?

And if there is what is the output of ls -l *.sth ?
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Tdak
PostPosted: Mon Aug 18, 2014 5:02 am    Post subject: Reply with quote

Novice

Joined: 30 Jun 2008
Posts: 18
Location: South Africa

The stash file does exist under the same directory as the kdb:

below is what I get when I run ls -ltr *.sth


-rwxrwxr-x 1 mqm mqm 129 Aug 18 12:05 key.sth
Back to top
View user's profile Send private message MSN Messenger
fjb_saper
PostPosted: Mon Aug 18, 2014 5:13 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

Could somebody have changed the password to the store without updating the stash file? Looks like you need to recreate the stash file. Remember the password is case sensitive.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
exerk
PostPosted: Mon Aug 18, 2014 5:31 am    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

Tdak wrote:
The stash file does exist under the same directory as the kdb:

below is what I get when I run ls -ltr *.sth


-rwxrwxr-x 1 mqm mqm 129 Aug 18 12:05 key.sth

Try un-stashing the password from the file - if you can't it may well mean the file is corrupted. Additionally, you should also reduce the permission level on the key store files...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
JosephGramig
PostPosted: Mon Aug 18, 2014 5:52 am    Post subject: Reply with quote

Grand Master

Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA

Code:
#!/usr/bin/perl -w
#
# unstash.pl - "decrypt" IBM HTTP server stash files. No, really. They *are* this pathetic. 

#
# sploit (BoByRiTe) 1999, Major Malfunction, code by Ben Laurie, cos Idudn't dud perly thing.


use strict;

die "Usage: $0 <stash file>\n" if $#ARGV != 0;

my $file=$ARGV[0];
open(F,$file) || die "Can't open $file: $!";

my $stash;
read F,$stash,1024;

my @unstash=map { $_^0xf5 } unpack("C*",$stash);

foreach my $c (@unstash) {
    last if $c eq 0;
    printf "%c",$c;
}
printf "\n";
Back to top
View user's profile Send private message AIM Address
exerk
PostPosted: Mon Aug 18, 2014 6:00 am    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

If using that script please bear in mind that if any 'special' characters have been used in the password you'll have to escape them when you use the command line...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
Tdak
PostPosted: Mon Aug 18, 2014 9:28 pm    Post subject: Reply with quote

Novice

Joined: 30 Jun 2008
Posts: 18
Location: South Africa

Thanks for the scripts and input I ran the unstash script and confirm I can see the password.
Back to top
View user's profile Send private message MSN Messenger
tczielke
PostPosted: Tue Aug 19, 2014 4:49 am    Post subject: Reply with quote

Guardian

Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA

One debugging point that might be helpful is doing the following.

1. Find what process is issuing the AMQ9660 error. Let's assume it is an amqrmppa process.

2. For every amqrmppa process in your queue manager, set up the following truss trace. We will use pid 12345 for an example.

truss -p -f 12345 > strace_12345.out 2>&1 &
[1] 12428

NOTE the pid (12428) that is running your truss.

3. It may be best to STOP your channel, REFRESH SECURITY TYPE(SSL), and then start your channel. You should get the AMQ9660 error in your queue manager error log.

4. Kill the truss commands that are running.

kill -9 12428

Look in your strace output. You should see where the amqrmpa process tried to open the .sth file. If the open was a failure, there should be a clue to why. In the following example, the file did not exist.

19641/961: open("/var/mqm/qmgrs/MQSERVER!MYQMGR/ssl/key.sth", O_RDONLY) Err#2 ENOENT
Back to top
View user's profile Send private message
tczielke
PostPosted: Tue Aug 19, 2014 5:02 am    Post subject: Reply with quote

Guardian

Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA

Also, just curious. Assuming an amqrmppa process did issue the AMQ9660 (lets say the pid was 12345), what does the following command show? Specifically, does the uid and ruid match?

ps -p 12345 -o uid,ruid
Back to top
View user's profile Send private message
Tdak
PostPosted: Tue Aug 19, 2014 11:54 pm    Post subject: Reply with quote

Novice

Joined: 30 Jun 2008
Posts: 18
Location: South Africa

Thanks for your input - with much digging I managed to get the process ID generating the AMQ9660 error. I ran the truss against amqzmgr0 which is a sub process of amqzxma0

Code:
20824 amqzxma0 -m QM
  20832 /opt/mqm/bin/amqzmgr0 -m QM
    20834 /opt/mqm/bin/runmqchi -m QM-q SYSTEM.CHANNEL.INITQ -r
    20835 /opt/mqm/bin/amqpcsea QM
    20836 /opt/mqm/bin/runmqlsr -r -m QM-t TCP -p 44110
      20926 /opt/mqm/bin/amqrmppa -m QM


and below is were the errors I got after restarting the channel:


Code:
2477:   open("/var/ld/64/ld.config", O_RDONLY)          Err#2 ENOENT
2477:   stat("/opt/mqm/lib64/libthread.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2477:   stat("/opt/mqm/lib64/libsocket.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2477:   stat("/opt/mqm/lib64/libc.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2477:   stat("/opt/mqm/lib64/libnsl.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2477:   stat("/opt/mqm/lib64/libdl.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2477:   stat("/opt/mqm/lib64/librt.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2477:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2477:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2477:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2477/1:         open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2477/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC190)            Err#25 ENOTTY
2477/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFD360)            Err#25 ENOTTY
2477/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC0F0)            Err#25 ENOTTY
2477/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC9E0)            Err#25 ENOTTY
2477/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC0F0)            Err#25 ENOTTY
2477/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC9E0)            Err#25 ENOTTY
2477/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFB7B0)            Err#25 ENOTTY
2477/1:         lwp_wait(2, 0xFFFFFD7FFFDFDE94)                 Err#22 EINVAL
2477/2:         lwp_detach(2)                                   Err#22 EINVAL
2481:   open("/var/ld/64/ld.config", O_RDONLY)          Err#2 ENOENT
20832/1:        read(5, 0xFFFFFD7FFFDFF56C, 12)                 Err#11 EAGAIN
2481:   stat("/opt/mqm/lib64/libthread.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2481:   stat("/opt/mqm/lib64/libsocket.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2481:   stat("/opt/mqm/lib64/libc.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2481:   stat("/opt/mqm/lib64/libnsl.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2481:   stat("/opt/mqm/lib64/libdl.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2481:   stat("/opt/mqm/lib64/librt.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2481:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2481:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2481:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2481/1:         open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFCD60)            Err#25 ENOTTY
2481/1:         ioctl(1, TCGETA, 0xFFFFFD7FFFDFE140)            Err#6 ENXIO
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC6F0)            Err#25 ENOTTY
2481/3:         ioctl(4, TCGETA, 0xFFFFFD7FFE67CA40)            Err#25 ENOTTY
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFCFE0)            Err#25 ENOTTY
2481/3:         unlink("/var/mqm/sockets/QM/@qmpersist/spipe/pfomwb1/ccc.2481") Err#2 ENOENT
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC6F0)            Err#25 ENOTTY
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFCFE0)            Err#25 ENOTTY
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFBDB0)            Err#25 ENOTTY
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFB960)            Err#25 ENOTTY
2481/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC250)            Err#25 ENOTTY
2481/1:         stat("/opt/mqm/lib64/libgsk7ssl_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/mqm/lib64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/mqm/lib64/libiostream.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/mqm/lib64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/mqm/lib64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/amd64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/usr/ccs/lib/64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/lib/64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libsocket.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/amd64/libsocket.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/usr/ccs/lib/64/libsocket.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libnsl.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/amd64/libnsl.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/usr/ccs/lib/64/libnsl.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/amd64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/usr/ccs/lib/64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/lib/64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/amd64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/usr/ccs/lib/64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/lib/64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/amd64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/usr/ccs/lib/64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/lib/64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/opt/SUNWspro/lib/amd64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         stat("/usr/ccs/lib/64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2481/1:         [b]open("/GEFMQ/QMGRS/QM/SSL/KEY.sth", O_RDONLY) Err#2 ENOENT[/b]
2523:   open("/var/ld/64/ld.config", O_RDONLY)          Err#2 ENOENT
2523:   stat("/opt/mqm/lib64/libthread.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2523:   stat("/opt/mqm/lib64/libsocket.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2523:   stat("/opt/mqm/lib64/libc.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2523:   stat("/opt/mqm/lib64/libnsl.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2523:   stat("/opt/mqm/lib64/libdl.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2523:   stat("/opt/mqm/lib64/librt.so.1", 0xFFFFFD7FFFDFF290) Err#2 ENOENT
2523:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2523:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2523:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2523/1:         open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2523/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC190)            Err#25 ENOTTY
2523/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFD360)            Err#25 ENOTTY
2523/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC0F0)            Err#25 ENOTTY
2523/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC9E0)            Err#25 ENOTTY
2523/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC0F0)            Err#25 ENOTTY
2523/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC9E0)            Err#25 ENOTTY
2523/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFB7B0)            Err#25 ENOTTY
2527:   open("/var/ld/64/ld.config", O_RDONLY)          Err#2 ENOENT
2527:   stat("/opt/mqm/lib64/libthread.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2527:   stat("/opt/mqm/lib64/libsocket.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2523/1:         lwp_wait(2, 0xFFFFFD7FFFDFDE94)                 Err#22 EINVAL
2527:   stat("/opt/mqm/lib64/libc.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2527:   stat("/opt/mqm/lib64/libnsl.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2527:   stat("/opt/mqm/lib64/libdl.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
2527:   stat("/opt/mqm/lib64/librt.so.1", 0xFFFFFD7FFFDFF280) Err#2 ENOENT
20832/1:        read(5, 0xFFFFFD7FFFDFF56C, 12)                 Err#11 EAGAIN
2527:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2527:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2527:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2527/1:         open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFCD60)            Err#25 ENOTTY
2527/1:         ioctl(1, TCGETA, 0xFFFFFD7FFFDFE140)            Err#6 ENXIO
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC6F0)            Err#25 ENOTTY
2527/3:         ioctl(4, TCGETA, 0xFFFFFD7FFE67CA40)            Err#25 ENOTTY
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFCFE0)            Err#25 ENOTTY
2527/3:         unlink("/var/mqm/sockets/CRRISK/@qmpersist/spipe/pfomwb1/ccc.2527") Err#2 ENOENT
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC6F0)            Err#25 ENOTTY
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFCFE0)            Err#25 ENOTTY
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFBDB0)            Err#25 ENOTTY
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFB960)            Err#25 ENOTTY
2527/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC250)            Err#25 ENOTTY
2527/1:         stat("/opt/mqm/lib64/libgsk7ssl_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/mqm/lib64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/mqm/lib64/libiostream.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/mqm/lib64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/mqm/lib64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/amd64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/usr/ccs/lib/64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/lib/64/libgsk7cms_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libsocket.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/amd64/libsocket.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/usr/ccs/lib/64/libsocket.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libnsl.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/amd64/libnsl.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/usr/ccs/lib/64/libnsl.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/amd64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/usr/ccs/lib/64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/lib/64/libgsk7sys_64.so", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/amd64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/usr/ccs/lib/64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/lib/64/libCstd.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/amd64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/usr/ccs/lib/64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/lib/64/libCrun.so.1", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/rw7/amd64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/opt/SUNWspro/lib/amd64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         stat("/usr/ccs/lib/64/libm.so.2", 0xFFFFFD7FFFDFC730) Err#2 ENOENT
2527/1:         open("/GEFMQ/QMGRS/CRRISK/SSL/CRRISK.sth", O_RDONLY) Err#2 ENOENT
2569:   open("/var/ld/64/ld.config", O_RDONLY)          Err#2 ENOENT
2569:   stat("/opt/mqm/lib64/libthread.so.1", 0xFFFFFD7FFFDFF260) Err#2 ENOENT
2569:   stat("/opt/mqm/lib64/libsocket.so.1", 0xFFFFFD7FFFDFF260) Err#2 ENOENT
2569:   stat("/opt/mqm/lib64/libc.so.1", 0xFFFFFD7FFFDFF260) Err#2 ENOENT
2569:   stat("/opt/mqm/lib64/libnsl.so.1", 0xFFFFFD7FFFDFF260) Err#2 ENOENT
2569:   stat("/opt/mqm/lib64/libdl.so.1", 0xFFFFFD7FFFDFF260) Err#2 ENOENT
2569:   stat("/opt/mqm/lib64/librt.so.1", 0xFFFFFD7FFFDFF260) Err#2 ENOENT
2569:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2569:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2569:   open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2569/1:         open("/var/run/name_service_door", O_RDONLY)    Err#2 ENOENT
2569/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC160)            Err#25 ENOTTY
2569/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFD330)            Err#25 ENOTTY
2569/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC0C0)            Err#25 ENOTTY
2569/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC9B0)            Err#25 ENOTTY
2569/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC0C0)            Err#25 ENOTTY
2569/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFC9B0)            Err#25 ENOTTY
2569/1:         ioctl(3, TCGETA, 0xFFFFFD7FFFDFB780)            Err#25 ENOTTY
2569/1:         lwp_wait(2, 0xFFFFFD7FFFDFDE64)                 Err#22 EINVAL
20832/1:        read(5, 0xFFFFFD7FFFDFF56C, 12)                 Err#11 EAGAIN



I'm not sure if all this could be related to the issue we having however I found this line:

2481/1: open("/GEFMQ/QMGRS/QM/SSL/KEY.sth", O_RDONLY) Err#2 ENOENT

Regards
Thabo Kitime
Back to top
View user's profile Send private message MSN Messenger
tczielke
PostPosted: Wed Aug 20, 2014 4:31 am    Post subject: Reply with quote

Guardian

Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA

Quote:
2481/1: open("/GEFMQ/QMGRS/QM/SSL/KEY.sth", O_RDONLY) Err#2 ENOENT


This error would mean the /GEFMQ/QMGRS/QM/SSL/KEY.sth file was not found.

So it looks like your QMGR SSLKEYR attribute is set to:

/GEFMQ/QMGRS/QM/SSL/KEY

When you go to the /GEFMQ/QMGRS/QM/SSL directory, what files do you see in that directory? Also, note the uppercase for KEY that it is searching for.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Goto page 1, 2  Next Page 1 of 2

MQSeries.net Forum Index » General IBM MQ Support » SSL key repository: password stash file absent or unusable
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.