Author |
Message
|
srvm |
Posted: Wed Aug 18, 2004 6:16 am Post subject: Invalid key database type was found gsk6cmd SSL Solaris |
|
|
Apprentice
Joined: 18 Aug 2004 Posts: 43
|
Hi,
I have seen few posts related to this topic on other forums, but haven't found a solution yet.
Here is what I am trying to do-
Env: Sun Solaris V 2.8
MQ Series V5.3 CSD with mqm-upd05 U487899
GSKit Info:
(#)ProductName: gsk6e (GoldCoast Build) 0406171803
@(#)ProductVersion: 6.0.5.43
@(#)ProductInfo: 04/06/15.00:00:28.04/06/17.18:11:04
@(#)CMVCInfo: gsk6e_040615/gsk6e_ikm gsk6e_040615/gsk6e_ssl gsk6e_040615/gsk6e_support gsk6e_040615/gsk6e_cms
NOTE: All the required Solaris patches mentioned in memo.ptf is in place.
CLASSPATH
/opt/mqm/ssl/lib/tools.jar:/opt/mqm/ssl/lib/i18n.jar:/opt/ibm/gsk6/classes/cfwk.zip:/opt/ibm/gsk6/classes/gsk6cls.jar:/opt/mqm/java/lib/com.ibm.mq.jar:/opt/mqm/java/lib/com.ibm.mqbind.jar:/opt/mqm/java/lib/com.ibm.mqjms.jar:/opt/mqm/java/lib/fscontext.jar:/opt/mqm/java/lib/ldap.jar:/opt/mqm/java/lib/providerutil.jar:/opt/mqm/java/lib/jms.jar:/opt/mqm/java/lib/jndi.jar:/opt/mqm/java/lib/jta.jar:/opt/mqm/java/lib/connector.jar:.
PATH
/opt/mqm/ssl/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/EMCpower/bin:/etc:/opt/mqm/java/lib:/data/oracle/product/8.1.7.4/bin:.
JAVA_HOME=/opt/mqm/ssl
Problem: Creation of Key database of type "cms" failed:
$gsk6cmd -keydb -create -db keys -pw passw0rd -type cms -expire 3660 -stash
Invalid key database type was found.
Other Things Tried (to prove that I am trying my best to get this thing to work)
a. Able to create keydb of type "jks" - Proves that GSKit is instaleld and works
b. Used -covert option to convert the "jks" db to "cms" type. To see if the -create option only has this problem. But, it failed giving the same error too. "Invalid key database type was found."
Anyone has tried and succeeded in doing this - please provide some pointer as to what is wrong. I would not like to discuss the state of IBM's documentaion on GSKit...it would be waste of time...
Thank you.
Raj |
|
Back to top |
|
 |
interactivechannel |
Posted: Wed Aug 18, 2004 9:02 am Post subject: |
|
|
Voyager
Joined: 20 May 2003 Posts: 94 Location: uk
|
I had a similar problem on AIX and think it was due to the C++ runtime environment not being at a high enough level. |
|
Back to top |
|
 |
mhubbard |
Posted: Wed Aug 25, 2004 12:06 pm Post subject: Invalid key database type was found. |
|
|
 Acolyte
Joined: 25 Aug 2004 Posts: 54
|
I hope you don't see a reply and get your hopes up.
I am just noting that I have the same results and worse on debian.
If I enter the command without any of the password parameters, I get the Invalid key database type was found. If I enter the full command as you have it...I get: -expire is not a valid parameter for UNKNOW key database or key store.
Here's hoping for an answer. _________________ Michael J. Hubbard |
|
Back to top |
|
 |
srvm |
Posted: Thu Aug 26, 2004 11:05 am Post subject: |
|
|
Apprentice
Joined: 18 Aug 2004 Posts: 43
|
I am out of this after I applied latest CSD07 and upgraded to GSKit 6.0.*.43 ver.
Raj |
|
Back to top |
|
 |
gunter |
Posted: Thu Aug 26, 2004 10:29 pm Post subject: |
|
|
Partisan
Joined: 21 Jan 2004 Posts: 307 Location: Germany, Frankfurt
|
Your java environment is wrong, I produced it on linux with
JAVA_HOME=/opt/IBMJava2-14 instead JAVA_HOME=/opt/mqm/ssl/jre.
If you try to create a database with gsk6ikm you'll miss CMS.
But I can't help you on Solaris because I havn't a working installation on it.
Search this site - gsk6ikm gsk6cmd Solaris. There are long threads discussing this subject.
Maybe you'll find further information. _________________ Gunter Jeschawitz
IBM Certified System Administrator - Websphere MQ, 5.3 |
|
Back to top |
|
 |
srvm |
Posted: Fri Aug 27, 2004 5:26 am Post subject: |
|
|
Apprentice
Joined: 18 Aug 2004 Posts: 43
|
gunter,
the JAVA_HOME is set per the documentation for Solaris.
Raj |
|
Back to top |
|
 |
jbacskai |
Posted: Tue Aug 31, 2004 7:03 am Post subject: same result |
|
|
 Apprentice
Joined: 30 Dec 2002 Posts: 26 Location: Hungary
|
Hi All,
I have the same problem, my configuration is
Env: Sun Solaris V 9
MQ Series V5.3 CSD with 6
GSKit Info ProductVersion: 6.0.3.33
to this command:
gsk6cmd -keydb -create -db .../key.kdb -pw password -type cms -expire 1095 -stash
I got:
Invalid key database type was found.
after setting the JAVA_HOME
$ JAVA_HOME=/opt/mqm/ssl
$ export JAVA_HOME
I got:
An error occurred while inserting keys to the database.
I tried the GSKit's error page, but found nothing ( http://publib.boulder.ibm.com/tividd/td/ITAMOS/SC32-1144-00/en_US/HTML/am41_error_ref08.htm )
I found newer version of GSKit on MQ support site. I'll try it but I don't think that it will help...
Srvm have you solved the problem? Anyone has new info about this?
Janos |
|
Back to top |
|
 |
techno |
Posted: Tue Aug 31, 2004 9:11 pm Post subject: |
|
|
Chevalier
Joined: 22 Jan 2003 Posts: 429
|
Specify store type too along with other params.. |
|
Back to top |
|
 |
srvm |
Posted: Wed Sep 01, 2004 5:29 am Post subject: |
|
|
Apprentice
Joined: 18 Aug 2004 Posts: 43
|
Janos,
Yes. I am in the business after I applied CSD07 and GSKit 6.0.*.43 (latest kit). Keep in mind you *MUST* read memo.ptf, specially the section about setting GSKit. The step to copy the latest jar files to /ext directory is *VERY* important.
Make sure the java.security files has all the providers.
#
# List of providers and their preference orders (see above):
#
security.provider.1=sun.security.provider.Sun
security.provider.2=com.ibm.spi.IBMCMSProvider
security.provider.3=com.ibm.crypto.provider.IBMJCE
security.provider.4=com.sun.net.ssl.internal.ssl.Provider
security.provider.5=com.ibm.jsse.JSSEProvider
#
It is strange that all of us trying to setup SSL for the the first time are stumbling on the same issue. This tell us that IBM's documentaion is really bad....Now, I am stuck and my certificates chain is giving some problem. I am assuming that is a problem that I might have created..I am looking for a solution on that in another posting....
Raj |
|
Back to top |
|
 |
jbacskai |
Posted: Thu Sep 02, 2004 5:48 am Post subject: |
|
|
 Apprentice
Joined: 30 Dec 2002 Posts: 26 Location: Hungary
|
Hi All,
I succed after downloading and installing the newest GSKit version 6.0.5.43!
Srvm I agree with you the IBM documentation is useless in this case.
Thanks for helping,
Janos |
|
Back to top |
|
 |
techno |
Posted: Thu Sep 09, 2004 7:58 am Post subject: |
|
|
Chevalier
Joined: 22 Jan 2003 Posts: 429
|
Is CSD07 the lastest Fix Pack available for Websphere MQ 5.3? |
|
Back to top |
|
 |
|