ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » gsk7cmd error

Post new topic  Reply to topic Goto page 1, 2  Next
 gsk7cmd error « View previous topic :: View next topic » 
Author Message
Inforz
PostPosted: Mon Aug 05, 2019 7:07 am    Post subject: gsk7cmd error Reply with quote

Centurion

Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India

Hi,

the following gsk7cmd command is throwing an error as below. Please advise

Command: gsk7cmd -cert -list -db key.kdb -pw <password>

Error: Parameter -pw is not required

OS: AIX 1.6

MQversion: 7.0.1.9

When I tried the same cmd avoiding -pw parameter, it throws invalid password supplied error.


P.S. the same command works fine on another AIX server with same OS version, MQ version and gsk7 kit.
Back to top
View user's profile Send private message
hughson
PostPosted: Mon Aug 05, 2019 3:52 pm    Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1914
Location: Bay of Plenty, New Zealand

Could try this instead (from memory)?

Code:
gsk7cmd -cert -list -db key.kdb -stashed


Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
fjb_saper
PostPosted: Tue Aug 06, 2019 5:18 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

hughson wrote:
Could try this instead (from memory)?

Code:
gsk7cmd -cert -list -db key.kdb -stashed


Cheers,
Morag

Nice try Morag, but if gsk7cmd or gsk7capicmd used the -stashed option it was never published and an undocumented feature.
AFAIR the -stashed option was introduced with gsk8 and runmqakm / runmqckm... gdk7cmd brings me back to MQ 7.0x long time obsolete...
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Inforz
PostPosted: Tue Aug 06, 2019 8:16 am    Post subject: Reply with quote

Centurion

Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India

Thanks fjb_saper and hughson for your suggestions.

As fjb_saper said, it didnt workout.

What are the other options do we have for this error resolution. Can I try installing earlier or newer gsk kits and try the same command?
Any other suggestions please.
Back to top
View user's profile Send private message
tczielke
PostPosted: Tue Aug 06, 2019 9:08 am    Post subject: Reply with quote

Guardian

Joined: 08 Jul 2010
Posts: 939
Location: Illinois, USA

If you are trying to list all the certificate labels in the database, I would run it as follows:

gsk7cmd -cert -list all -db key.kdb

If you are trying to list the details of a specific certificate, I would run it as follows:

gsk7cmd -cert -details -db key.kdb -label ibmwebspheremqQM1
_________________
Working with MQ since 2010.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Tue Aug 06, 2019 7:50 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

Shouldn't the label be all lowercase ??
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
tczielke
PostPosted: Wed Aug 07, 2019 4:42 am    Post subject: Reply with quote

Guardian

Joined: 08 Jul 2010
Posts: 939
Location: Illinois, USA

fjb_saper wrote:
Shouldn't the label be all lowercase ??


Sorry, it should have been:

gsk7cmd -cert -details -db key.kdb -label ibmwebspheremqqm1

Was doing the label piece from memory and forgot about the lower case on the queue manager name!
_________________
Working with MQ since 2010.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Wed Aug 07, 2019 5:52 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

tczielke wrote:
Was doing the label piece from memory and forgot about the lower case on the queue manager name!

Don't worry, it happens to the best of us. Some call it age...
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
tczielke
PostPosted: Wed Aug 07, 2019 6:32 am    Post subject: Reply with quote

Guardian

Joined: 08 Jul 2010
Posts: 939
Location: Illinois, USA

My kingdom for a grey-haired, senile emoticon
_________________
Working with MQ since 2010.
Back to top
View user's profile Send private message
Inforz
PostPosted: Mon Aug 12, 2019 5:43 am    Post subject: Reply with quote

Centurion

Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India

tczielke wrote:


gsk7cmd -cert -list all -db key.kdb



Got the below error when I tried your command

An invalid password was provided or the key database has been tampered or corrupted.
Back to top
View user's profile Send private message
bruce2359
PostPosted: Mon Aug 12, 2019 6:09 am    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9394
Location: US: west coast, almost. Otherwise, enroute.

Inforz wrote:
tczielke wrote:


gsk7cmd -cert -list all -db key.kdb



Got the below error when I tried your command

An invalid password was provided or the key database has been tampered or corrupted.

This is the complete error message? No AMQnnnn message id?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
Inforz
PostPosted: Mon Aug 12, 2019 8:09 am    Post subject: Reply with quote

Centurion

Joined: 15 Apr 2011
Posts: 139
Location: Chennai, India

Ahh, this is an error from gsk7 kit command.
This kit is installed in a server separately and is used for SSL related configurations.
Once setup, the certificates can be used in MQ(and other tools as well) to have secure connections between servers.
Back to top
View user's profile Send private message
tczielke
PostPosted: Mon Aug 12, 2019 8:43 am    Post subject: Reply with quote

Guardian

Joined: 08 Jul 2010
Posts: 939
Location: Illinois, USA

It sounds like you are either using the wrong password, or the key.kdb is corrupted. Are you familiar with how to unwind the stash file to validate you are using the correct password?
_________________
Working with MQ since 2010.
Back to top
View user's profile Send private message
bruce2359
PostPosted: Mon Aug 12, 2019 9:37 am    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9394
Location: US: west coast, almost. Otherwise, enroute.

bruce2359 wrote:
Inforz wrote:
tczielke wrote:


gsk7cmd -cert -list all -db key.kdb



Got the below error when I tried your command

An invalid password was provided or the key database has been tampered or corrupted.

This is the complete error message? No AMQnnnn message id?

Let me ask it another way... What error message was written to the qmgr error log when you ran the gsk7cmd?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
hughson
PostPosted: Mon Aug 12, 2019 2:35 pm    Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1914
Location: Bay of Plenty, New Zealand

bruce2359 wrote:
bruce2359 wrote:
Inforz wrote:
tczielke wrote:


gsk7cmd -cert -list all -db key.kdb



Got the below error when I tried your command

An invalid password was provided or the key database has been tampered or corrupted.

This is the complete error message? No AMQnnnn message id?

Let me ask it another way... What error message was written to the qmgr error log when you ran the gsk7cmd?

I don't think any message would be written to the queue manager error log as a result of running the gsk7cmd command.

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Goto page 1, 2  Next Page 1 of 2

MQSeries.net Forum Index » IBM MQ Security » gsk7cmd error
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.