Posted: Thu Jul 31, 2003 1:37 pm Post subject: Client SSL connection to Server on 5.3
Newbie
Joined: 31 Jul 2003 Posts: 5
We are trying to get our clients external to our headquarters/network to use the client to connect to our queue manager. I have went through many of the postings and keep coming up with the same errors. When trying to do an
[color=red]amqsputc queue qmgr[/color]
I get errors that say:
A failure occurred during SSL handshaking.
During SSL handshaking, or associated activities, a failure occurred. The
failure is 'WebSphere MQ TCP/IP Receive Failed' and has caused WebSphere
MQ channel name 'SSL.CONNECT.2' to be closed. If the name is '????' then
the name is unknown.
Connection to host 'mqqa (192.168.1.142)' closed.
An error occurred receiving data from 'mqqa (192.168.1.142)' over TCP/IP.
The connection to the remote host has unexpectedly terminated.
Does anyone know what this might mean.
I have created certificates with makecert, assigned to qmgr, channels with ssl, exported a certificate to client as well as amqclchl.tab file. Not sure what else to do.
Windows clients
1. Set the MQSSLKEYR environment variable to specify your key store name.
set MQSSLKEYR=c:\ssl\mykey
2. Add the self-signed certificate.
amqmcert -a -s QMNAME.der
3. Add your personal certificate.
amqmcert -a -p client.p12 -z password
4. Assign your personal certificate to the WebSphere MQ client.
amqmcert -l
amqmcert -d nnnnn
Tip: An asterisk (*) shows the certificate number that contains a private key.
SSL clients can be configured in one of the following ways. They are listed in order of decreasing precedence.
1. When a WebSphere MQ client application issues an MQCONNX call.
2. Using a client channel definition table.
3. Using Active Directory on Windows.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum