MQSeries.net :: View topic - Unable to Conenct to QMGR with SSL enabled

gyadavil

Hello

I am getting the following error when I try to connect to QMGR once we enabled the SSL.

main, handling exception: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target

Following tasks has been performed.

1. Created Key repository under
/var/mqm/qmgrs/qmgr/ssl/key.kdb
2. Set the property SSLKEYR(/var/mqm/qmgrs/SWGMQ07DEV/ssl/DSW_SWGMQ07DEVKeystore)

3. Created one self signed certificate on server
4. Extracted self signed certificate
5. Set the channel property CipherSpec and SSLCAUTH
SSLCAUTH(OPTIONAL) SSLCIPH(RC4_MD5_US)

Client Side
1. Created a jks key db
2. Added the self signed certificated created on server side
3. execute the program with following code in place
MQQueueConnectionFactory mqcf = new MQQueueConnectionFactory();
mqcf.setTransportType(JMSC.MQJMS_TP_CLIENT_MQ_TCPIP);
mqcf.setHostName("swgmq07.rochny.ibm.com");
mqcf.setPort(1415);
mqcf.setChannel("CSDW.SVRCONN");
mqcf.setQueueManager("SWGMQ07DEV");
System.setProperty("javax.net.ssl.trustStore","C:\\IBM\\SSL\\gowri_jks.jks");
System.setProperty("javax.net.ssl.trustStorePassword","password");
System.setProperty("javax.net.ssl.keyStore","C:\\IBM\\SSL\\gowri_jks.jks");
System.out.println("before key password");
mqcf.setSSLCipherSuite("SSL_RSA_WITH_RC4_128_MD5");

Can someone help me out what is missing here.