| Author |
Message
|
| mqexplorer |
 Posted: Thu Aug 02, 2007 12:42 pm Post subject: Problem with MQ Explorer and SSL enabled SYSTEM.ADMIN.SVRCON |
 |
|
Novice
Joined: 02 Aug 2007
Posts: 17
|
Hi all
I am trying to connect to SYSTEM.ADMIN.SVRCONN which is SSL enabled and using NULL_CIPH (please see below) using MQ Explorer.
I followed the instructions in:
http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/index.jsp?topic=/com.ibm.mq.amqzag.doc/fa12120_.htm
to create the server kdb and client jks certs. I imported the queuemanager key in the client jks cert as per the above document. I cannot connect to the channel at all.
I do not see any errors specified in the qmgr/errors directory or the /var/mqm/errors directory. MQ explorer does not give any verbose errors either. i have no clue whats going on...can anyone help??
Thanks!
display channel(SYSTEM.ADMIN.SVRCONN)
5 : display channel(SYSTEM.ADMIN.SVRCONN)
AMQ8414: Display Channel details.
CHANNEL(SYSTEM.ADMIN.SVRCONN) CHLTYPE(SVRCONN)
ALTDATE(2007-08-02) ALTTIME(13.50.44)
COMPHDR(NONE) COMPMSG(NONE)
DESCR( ) HBINT(300)
KAINT(AUTO) MAXMSGL(4194304)
MCAUSER(nobody) MONCHL(QMGR)
RCVDATA( ) RCVEXIT( )
SCYDATA( ) SCYEXIT( )
SENDDATA( ) SENDEXIT( )
SSLCAUTH(REQUIRED) SSLCIPH(NULL_SHA)
SSLPEER( ) TRPTYPE(TCP) |
|
| Back to top |
|
 |
| Michael Dag |
| Posted: Thu Aug 02, 2007 1:04 pm Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
|
| Back to top |
|
|
| mqexplorer |
| Posted: Thu Aug 02, 2007 1:18 pm Post subject: |
|
|
Novice
Joined: 02 Aug 2007
Posts: 17
|
| Michael Dag wrote: |
| does it work without SSL enabled??? |
Yes. Also I just enabled SSL on SYSTEM.AUTO.SVRCONN and now cant connect to it from the explorer either
ALTER CHANNEL(SYSTEM.AUTO.SVRCONN) CHLTYPE(SVRCONN) SSLCAUTH(REQUIRED) SSLCIPH('NULL_SHA')
In both cases I get an AMQ4059. I dont see anything in the qmanager error logs either  |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Aug 02, 2007 1:35 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You can enable SSL Events, and use those to help you figure out what's going on.
You can use the Support Pack MO04 to help you get started with MQ SSL for client connections.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| mqexplorer |
| Posted: Thu Aug 02, 2007 1:40 pm Post subject: |
|
|
Novice
Joined: 02 Aug 2007
Posts: 17
|
| jefflowrey wrote: |
You can enable SSL Events, and use those to help you figure out what's going on.
You can use the Support Pack MO04 to help you get started with MQ SSL for client connections. |
How do you enable SSL events? I couldnt find anything in the docs? |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Thu Aug 02, 2007 1:44 pm Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Aug 02, 2007 8:58 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
You sure this is still going to work if you leave mcauser('nobody') on your channel ?? 
I'd say working as designed...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Thu Aug 02, 2007 10:59 pm Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
| fjb_saper wrote: |
You sure this is still going to work if you leave mcauser('nobody') on your channel ??
I'd say working as designed... |
that's exactly why I asked:
| Michael Dag wrote: |
| does it work without SSL enabled??? |
if it does like mqexplorer says, then nobody must have at least the inquiry rights 
_________________
Michael
MQSystems Facebook page |
|
| Back to top |
|
|
|
|
