MQSeries.net :: View topic

techno · Posted: Fri Aug 13, 2004 1:42 pm Post subject: ssl and ciphersuite.

I am trying to have an ssl connection between java client(on windows) and qmgr (on hp-ux).

Used gsk6ikm tool on unix and created self-signed certificate. Server authentication is working fine.

Now, at the same time, I want even the client to be authenticated. Here, I am using keytool to create self signed certificate. I am getting error. I am not clear if I am doing correct.

I did following steps.

Created keystore and key(On windows)
keytool -genkey -alias client-alias -keyalg RSA -keypass changeit -storepass changeit -keystore keystore

Extracting the certificate (On windows)
keytool -export -alias client-alias -storepass changeit -file client.cer -keystore keystore

Moved client.cer to Unix. Added this to keystore using gsk6ikm

Shall I have to change the definition of client channel on Unix side(Both client and srvr conn channels are on Unix side. I don't think the java client uses the definition of client channel). What should be the cipher suite? Above, I have used RSA algo. On server conn channel, I have used SSLCIPH(RC4_MD5_US) .

Tried connecting java client to the qmgr. I am getting 2009. Please help me. When I change the SSLCAUTH to optional, it works fine. I am sure there is something wrong with the way I am configuring

Thanks