MQSeries.net :: View topic

wwwrakesh

Hi There,

I am trying to do SSL communication between Java Client on Windows NT SP6 & MQServer running on same machine. I am doing only server authentication not client.

I have created self sign certificate with IBM's Ikeyman in PKCS12 format key datatabse. I exported the certificate & imported in computer's store using IE wizards. Thne, I assigned that certificates to my Queue Manager.
I also exported public certificate created for the self-signed personal certificate.
In my client truststore (format pkcs12) I have added above exported certificate in my signer certificate list. but when I run my program I get folowing exception
******************************************
Setting up MQ environment
KeyStore is:C:\tmp\selfsign\clientTrustStore.p12
TrustStore is:C:\tmp\selfsign\clientTrustStore.p12
Connecting Queue Manager
MQJE001: An MQException occurred: Completion Code 2, Reason 2397
MQJE056: Initial negotiation failure
MQJE001: Completion Code 2, Reason 2397
An MQSeries error occurred : Completion code 2 Reason code 2397
error reason: javax.net.ssl.SSLHandshakeException: illegal parameter
main: end
******************************************
When I do same thing for demo certificate from Globalsign I am not facing any problem. All works fine.
my JDK is.
***********************************************************
java version "1.3.1"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.3.1)
Classic VM (build 1.3.1, J2RE 1.3.1 IBM Windows 32 build cn131-20021107 (JIT enabled: jitc))
********************************************************
Here I have changed
keystore.type=pkcs12 (from keystore.type=jks) in java.security file in JDK_HOME\jre\lib\security folder

Any pointer would be of great help!

Thanks
Rakesh