| Author |
Message
|
| Inforz |
 Posted: Mon Aug 05, 2019 7:07 am Post subject: gsk7cmd error |
 |
|
Centurion
Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India
|
Hi,
the following gsk7cmd command is throwing an error as below. Please advise
Command: gsk7cmd -cert -list -db key.kdb -pw <password>
Error: Parameter -pw is not required
OS: AIX 1.6
MQversion: 7.0.1.9
When I tried the same cmd avoiding -pw parameter, it throws invalid password supplied error.
P.S. the same command works fine on another AIX server with same OS version, MQ version and gsk7 kit. |
|
| Back to top |
|
 |
| hughson |
| Posted: Mon Aug 05, 2019 3:52 pm Post subject: |
|
|
Padawan
Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand
|
Could try this instead (from memory)?
| Code: |
| gsk7cmd -cert -list -db key.kdb -stashed |
Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Aug 06, 2019 5:18 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| hughson wrote: |
Could try this instead (from memory)?
| Code: |
| gsk7cmd -cert -list -db key.kdb -stashed |
Cheers,
Morag |
Nice try Morag, but if gsk7cmd or gsk7capicmd used the -stashed option it was never published and an undocumented feature.
AFAIR the -stashed option was introduced with gsk8 and runmqakm / runmqckm... gdk7cmd brings me back to MQ 7.0x long time obsolete... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Inforz |
| Posted: Tue Aug 06, 2019 8:16 am Post subject: |
|
|
Centurion
Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India
|
Thanks fjb_saper and hughson for your suggestions.
As fjb_saper said, it didnt workout.
What are the other options do we have for this error resolution. Can I try installing earlier or newer gsk kits and try the same command?
Any other suggestions please. |
|
| Back to top |
|
|
| tczielke |
| Posted: Tue Aug 06, 2019 9:08 am Post subject: |
|
|
Guardian
Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA
|
If you are trying to list all the certificate labels in the database, I would run it as follows:
gsk7cmd -cert -list all -db key.kdb
If you are trying to list the details of a specific certificate, I would run it as follows:
gsk7cmd -cert -details -db key.kdb -label ibmwebspheremqQM1
_________________
Working with MQ since 2010. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Aug 06, 2019 7:50 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Shouldn't the label be all lowercase ??
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| tczielke |
| Posted: Wed Aug 07, 2019 4:42 am Post subject: |
|
|
Guardian
Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA
|
| fjb_saper wrote: |
| Shouldn't the label be all lowercase ?? |
Sorry, it should have been:
gsk7cmd -cert -details -db key.kdb -label ibmwebspheremqqm1
Was doing the label piece from memory and forgot about the lower case on the queue manager name!
_________________
Working with MQ since 2010. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Aug 07, 2019 5:52 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| tczielke wrote: |
| Was doing the label piece from memory and forgot about the lower case on the queue manager name! |
Don't worry, it happens to the best of us. Some call it age...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| tczielke |
| Posted: Wed Aug 07, 2019 6:32 am Post subject: |
|
|
Guardian
Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA
|
My kingdom for a grey-haired, senile emoticon 
_________________
Working with MQ since 2010. |
|
| Back to top |
|
|
| Inforz |
| Posted: Mon Aug 12, 2019 5:43 am Post subject: |
|
|
Centurion
Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India
|
| tczielke wrote: |
gsk7cmd -cert -list all -db key.kdb
|
Got the below error when I tried your command
An invalid password was provided or the key database has been tampered or corrupted. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Aug 12, 2019 6:09 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| Inforz wrote: |
| tczielke wrote: |
gsk7cmd -cert -list all -db key.kdb
|
Got the below error when I tried your command
An invalid password was provided or the key database has been tampered or corrupted. |
This is the complete error message? No AMQnnnn message id?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Inforz |
| Posted: Mon Aug 12, 2019 8:09 am Post subject: |
|
|
Centurion
Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India
|
Ahh, this is an error from gsk7 kit command.
This kit is installed in a server separately and is used for SSL related configurations.
Once setup, the certificates can be used in MQ(and other tools as well) to have secure connections between servers. |
|
| Back to top |
|
|
| tczielke |
| Posted: Mon Aug 12, 2019 8:43 am Post subject: |
|
|
Guardian
Joined: 08 Jul 2010
Posts: 941
Location: Illinois, USA
|
It sounds like you are either using the wrong password, or the key.kdb is corrupted. Are you familiar with how to unwind the stash file to validate you are using the correct password?
_________________
Working with MQ since 2010. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Aug 12, 2019 9:37 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| bruce2359 wrote: |
| Inforz wrote: |
| tczielke wrote: |
gsk7cmd -cert -list all -db key.kdb
|
Got the below error when I tried your command
An invalid password was provided or the key database has been tampered or corrupted. |
This is the complete error message? No AMQnnnn message id? |
Let me ask it another way... What error message was written to the qmgr error log when you ran the gsk7cmd?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| hughson |
| Posted: Mon Aug 12, 2019 2:35 pm Post subject: |
|
|
Padawan
Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand
|
| bruce2359 wrote: |
| bruce2359 wrote: |
| Inforz wrote: |
| tczielke wrote: |
gsk7cmd -cert -list all -db key.kdb
|
Got the below error when I tried your command
An invalid password was provided or the key database has been tampered or corrupted. |
This is the complete error message? No AMQnnnn message id? |
Let me ask it another way... What error message was written to the qmgr error log when you ran the gsk7cmd? |
I don't think any message would be written to the queue manager error log as a result of running the gsk7cmd command.
Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software |
|
| Back to top |
|
|
|
|
