MQSeries.net :: View topic

krishna009 · Posted: Tue Apr 28, 2009 12:30 am Post subject:

Hi Experts,

created 2 qmgrs(QM1,QM2) with out SSL, these 2 qmgr's communicated well.

then i implemented ssl for 2 qmgrs.
steps:
1)created key repositories for each qmgrs
paths: C:/progfiles/ibm/websphereMQ/qmgrs/QM1/ssl/qm1.crl, qm1.kdb, qm1.rdb, qm1.sth
C:/progfiles/ibm/websphereMQ/qmgrs/QM2/ssl/qm2.crl, qm2.kdb, qm2.rdb, qm2.sth
2)created self signed certificate
path: C:/progfiles/ibm/websphereMQ/ssldemo.pfx, with password "sslmqadmin"
3)import the certificated through Internet explorer.

4)implement the ssl for QM1 channel(QM1.QM2) sender channel with
SSL CiperSpec:-TRIPLE_DES_SHA_US
at reciver channel(QM1.QM2) implemented TRIPLE_DES_SHA_US.

5)started channel QM1.QM2 it's going to retrying state,then i find the log file information as

----- amqrccca.c : 777 --------------------------------------------------------
4/28/2004 12:15:17 - Process(2960.1) User(MUSR_MQADMIN) Program(runmqchl.exe)
AMQ9002: Channel 'QM1.QM2' is starting.

EXPLANATION:
Channel 'QM1.QM2' is starting.
ACTION:
None.
-------------------------------------------------------------------------------
4/28/2004 12:15:17 - Process(2960.1) User(MUSR_MQADMIN) Program(runmqchl.exe)
AMQ9660: SSL key repository: password stash file absent or unusable.

EXPLANATION:
The SSL key repository cannot be used because MQ cannot obtain a password to
access it. Reasons giving rise to this error include:
(a) the key database file and password stash file are not present in the
location configured for the key repository,
(b) the key database file exists in the correct place but that no password
stash file has been created for it,
(c) the files are present in the correct place but the userid under which MQ is
running does not have permission to read them,
(d) one or both of the files are corrupt.

The channel is 'QM1.QM2'; in some cases its name cannot be determined and so is
shown as '????'. The channel did not start.
ACTION:
Ensure that the key repository variable is set to where the key database file
is. Ensure that a password stash file has been associated with the key database
file in the same directory, and that the userid under which MQ is running has
read access to both files. If both are already present and readable in the
correct place, delete and recreate them. Restart the channel.
----- amqccisa.c : 1213 -------------------------------------------------------
4/28/2004 12:15:17 - Process(2960.1) User(MUSR_MQADMIN) Program(runmqchl.exe)
AMQ9999: Channel program ended abnormally.

EXPLANATION:
Channel program 'QM1.QM2' ended abnormally.
ACTION:
Look at previous error messages for channel program 'QM1.QM2' in the error
files to determine the cause of the failure.
----- amqrccca.c : 777 --------------------------------------------------------

let me know the what i done wrong for implementing ssl in windows.

Plz reply me.