MQSeries.net :: View topic

hhe1 · Posted: Tue May 22, 2007 2:54 pm Post subject: How to verify the SSL Client?

Hi, I am attempting to implement an mq client connection to a queue manager using SSL. Our original MQ connection works without SSL. Below are the steps I have taken to achieve this, taken from various IBM docs.

1. Obtain a certificate ( and import on my machine )
2. Storing my cert on windows with amqmcert command
a. SET MQSSLKEYR=c:\ssl\myKey
b. Add my personal cert by running "amqmcert -a -p "c:\ssl\myKey.pfx" -z password
c. Assign my cert to a WebSphere MQ client by running "amqmcert -d 12345"
3. Modified the original code to add SSL connection option for MQCONNX
a. Define a MQSCO address in SSLConfigPtr of MQCNO
b. Define SSL CipherSpec as "TRIPLE_DES_SHA_US"
c. Define the key repository.
d. use the MQCNO V4 structure specified MQCNO_VERSION_4.

Then I intend to test the client connection from a remote Windows box. I always get zero return both compCode and reasonCode by calling the MQCONNX even the server side doesn't setup yet and the Key file under c:\\ssl was removed. Am I missing a step to setup SSL? How can I verify the SSL client works fine?

Thanks.

Helen