| Author |
Message
|
| HenriqueS |
 Posted: Fri Sep 22, 2006 6:38 am Post subject: AMQ9660 no sth - SSL channel in trying state - no clue about |
 |
|
Master
Joined: 22 Sep 2006
Posts: 235
|
Folks,
I did a search on the causes of the problem I am having here, found some previous oposts about it, but I had no success figuring out what is going on here...
Error: (from the log) "AMQ9660 - password stash file not found, etc." When I start the channel it stays on TRYING STATE.
Some info:
a) Websphere MQ 6.0
b) Windows XP with no special permissions on the filesystem
c) key.sth, key.crl, key.kdb, key.rdb and cert.arm (from the dest queue manager) stored in "C:\Program Files\IBM\WebSphere
MQ\Qmgrs\javaclient\ssl" . Cert.arm was added to the key database sucessfully.
d) SSL repository set to "C:\Program Files\IBM\WebSphere MQ\Qmgrs\javaclient\ssl\"
e) Channel communication works perfectly when SSL is not enabled.
f) SSL Cipher are the same on both channels.
g) LOG from the dest. queue manager shows it isn´t even contacted...
I have no clue why this is not working...any help is appreciated. |
|
| Back to top |
|
 |
| HenriqueS |
| Posted: Mon Sep 25, 2006 10:25 am Post subject: |
|
|
Master
Joined: 22 Sep 2006
Posts: 235
|
| Hello people, any good soul here with some experience to share.... |
|
| Back to top |
|
|
| vennela |
| Posted: Mon Sep 25, 2006 10:29 am Post subject: |
|
|
Jedi Knight
Joined: 11 Aug 2002
Posts: 4055
Location: Hyderabad, India
|
Do the channels run with SSL disabled?
What kind of certs are you using -- CA Personal ..?
What CSD
| Quote: |
| d) SSL repository set to "C:\Program Files\IBM\WebSphere MQ\Qmgrs\javaclient\ssl\" |
This doesn't seem right to me |
|
| Back to top |
|
|
| HenriqueS |
| Posted: Mon Sep 25, 2006 11:03 am Post subject: |
|
|
Master
Joined: 22 Sep 2006
Posts: 235
|
Yes, they run with SSL disabled.
The certs are self-signed. I created them with the Key Mgmt Tool from IBM.
Why do you think the ssl repository is set wrong?
| vennela wrote: |
Do the channels run with SSL disabled?
What kind of certs are you using -- CA Personal ..?
What CSD
| Quote: |
| d) SSL repository set to "C:\Program Files\IBM\WebSphere MQ\Qmgrs\javaclient\ssl\" |
This doesn't seem right to me |
|
|
| Back to top |
|
|
| bbburson |
| Posted: Mon Sep 25, 2006 11:49 am Post subject: |
|
|
Partisan
Joined: 06 Jan 2004
Posts: 378
Location: Nowhere near a queue manager
|
| HenriqueS wrote: |
Why do you think the ssl repository is set wrong?
| vennela wrote: |
| Quote: |
| d) SSL repository set to "C:\Program Files\IBM\WebSphere MQ\Qmgrs\javaclient\ssl\" |
This doesn't seem right to me |
|
SSL repository definition should include the file name (without extension) of the key store itself, such as
| Code: |
| C:\Program Files\IBM\WebSphere MQ\Qmgrs\javaclient\ssl\key |
|
|
| Back to top |
|
|
| HenriqueS |
| Posted: Mon Sep 25, 2006 12:35 pm Post subject: |
|
|
Master
Joined: 22 Sep 2006
Posts: 235
|
| Thanks a lot. It worked! Some documentation I got was not clear about... |
|
| Back to top |
|
|
| papadilbert |
| Posted: Wed Mar 21, 2007 8:27 pm Post subject: |
|
|
Newbie
Joined: 21 Mar 2007
Posts: 1
|
| This fixed my problem as well. Thanks for participating in the forum. Without y'all I would have continued searching for days. |
|
| Back to top |
|
|
|
|
