MQSeries.net :: View topic

tsimmons · Posted: Thu Apr 15, 2004 5:43 pm Post subject:

I've set up the QMGR to use SSL authentication with the client. I was able to use the root CA and personal certificates (signed by the root CA) on both the QMGR server and the MQ java client to do a one-way SSL handshake from QMGR to an MQ client using java JMS code (with JNDI bindings).

However, when I turn on SSLCAUTH on the QMGR to authenticate the client to do a 2-way SSL handshake, MQ aborts the channel with a no_certificate. This error was captured using the SSL debug option in the java code.

I've imported both the root CA certificate and personal certificate for the MQ client on both ends. The certificates are in the keystore/truststores on the java client as well. I went through this site and other numerous documentation and could not find anything. The documentation from IBM is not useful at all and makes us sysadmins work harder to do additional research.

Has anyone else experienced this problem before?

Thanks,

Tadd