ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » SSL problem with MQSeries 5.3 on AIX 4.3.3

Post new topic  Reply to topic
 SSL problem with MQSeries 5.3 on AIX 4.3.3 « View previous topic :: View next topic » 
Author Message
mhk
PostPosted: Wed Jan 05, 2005 8:44 pm    Post subject: SSL problem with MQSeries 5.3 on AIX 4.3.3 Reply with quote

Newbie

Joined: 05 Jan 2005
Posts: 1

Hi,

I am getting below error whenever I try to generate CMS keydatabase

gsk6cmd -keydb -create -file key.kdb -type cms -stash

When I used gks6cmd with version 6.0.0.4, I got below error

"unable to load jkpcs11 library "

then one of the forum advised me to upgrade to MQ 5.3 CSD07 and
gskit 6.0.0.37. With that I am facing below error :

"An error occured while inserting keys to the database"

I've checked the JAVA_HOME path and copied all the required jar files from gskit area to JAVA_HOME/jre/lib/ext dir.

As another option, I tried generating the key store with key.p12 (-type pkcs12) format as givnen in the manual without stashing password, I worked but when I incorporate this into MQ- secure channel, it gave me an error like 'unable to find stash password file".

Is there any MQ settings specify to key database is pkcs12 format instead of CMS. I think by default its taking as CMS type.

Can some one help me ? Thanks in advance.

Regards,
Manjunatha
Back to top
View user's profile Send private message
Anirud
PostPosted: Thu Jan 06, 2005 7:49 am    Post subject: Reply with quote

Master

Joined: 12 Feb 2004
Posts: 285
Location: Vermont

From System Admin., Guide... Chapter 18
Quote:
Create a CMS key database:
gsk6cmd -keydb -create -db filename -pw password -type cms -expire days -stash


You will have to set JAVA_HOME environment variable before running this command
Quote:
export JAVA_HOME=/usr/mqm/ssl/jre

This is on AIX. For Solaris or Linux, it will be /opt/mqm/ssl/jre
Back to top
View user's profile Send private message Visit poster's website
csmith28
PostPosted: Thu Jan 06, 2005 8:04 am    Post subject: Reply with quote

Grand Master

Joined: 15 Jul 2003
Posts: 1196
Location: Arizona

Also on AIX Servers you may need to install some C++ filesets. The versions I had to install for AIX5.1.0.0 / WMQ5.3.0.6 were:
Code:

 # lslpp -ha "xlC.*"
  Fileset         Level     Action       Status       Date         Time
  ----------------------------------------------------------------------------
Path: /usr/lib/objrepos
  xlC.adt.include
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     01:22:27
                  6.0.0.0   APPLY        COMPLETE     02/11/04     01:22:27

  xlC.aix50.rte
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     01:22:35
                  6.0.0.0   APPLY        COMPLETE     02/11/04     01:22:35
                 6.0.0.14   COMMIT       COMPLETE     09/05/04     15:21:44
                 6.0.0.14   APPLY        COMPLETE     09/05/04     15:21:38

  xlC.cpp
                  5.0.2.0   COMMIT       COMPLETE     02/11/04     02:14:48
                  5.0.2.0   APPLY        COMPLETE     02/11/04     02:14:48

  xlC.msg.en_US.cpp
                  5.0.2.0   COMMIT       COMPLETE     02/11/04     02:14:55
                  5.0.2.0   APPLY        COMPLETE     02/11/04     02:14:55

  xlC.msg.en_US.rte
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     02:27:31
                  6.0.0.0   APPLY        COMPLETE     02/11/04     02:27:31

  xlC.rte
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     01:22:49
                  6.0.0.0   APPLY        COMPLETE     02/11/04     01:22:49

_________________
Yes, I am an agent of Satan but my duties are largely ceremonial.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » SSL problem with MQSeries 5.3 on AIX 4.3.3
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.