| Author |
Message
|
| gyanibaba |
 Posted: Tue Jan 19, 2010 3:23 pm Post subject: using SSL throwing error 2539 |
 |
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
I am working on solaris platform using C++ language. I have one MQ client application, which is tring to connect to MQ server on different machine through SSL channel. I am getting error 2539. I am providing below information in MQCONNX call
ClientConn.ConnectionName
ClientConn.ChannelName
ClientConn.SSLCipherSpec(
ClientConn.Version = MQCD_VERSION_7;
SslConnOptions.KeyRepository
ConnectOptions.ClientConnPtr = &ClientConn;
ConnectOptions.SSLConfigPtr = &SslConnOptions;
ConnectOptions.Version = MQCNO_VERSION_4;
Thanks and regards
gyan |
|
| Back to top |
|
 |
| exerk |
| Posted: Wed Jan 20, 2010 12:00 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Have you tried it with the channel 'in clear', i.e. no SSLCIPH specified in the channel definition and no SSL specified in the MQCONNX call? What does the error log of the queue manager state?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| gyanibaba |
| Posted: Wed Jan 20, 2010 1:38 pm Post subject: |
|
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
I have tried that one and its get connected. Do we need to include any specific libraries for SSL support when i am compiling my program.
thanks
gyan |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Jan 20, 2010 1:41 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| gyanibaba wrote: |
| I have tried that one and its get connected. Do we need to include any specific libraries for SSL support when i am compiling my program. |
No. You just need the channel configured correctly for SSL.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gyanibaba |
| Posted: Wed Jan 20, 2010 1:42 pm Post subject: |
|
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
leave it
Last edited by gyanibaba on Sun Jan 31, 2010 3:23 pm; edited 1 time in total |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Jan 20, 2010 1:49 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| gyanibaba wrote: |
ACTION:
Change the remote channel 'EVEREST' to specify a CipherSpec so that both ends
of the channel have matching CipherSpecs. |
Well that seems clear enough. 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gyanibaba |
| Posted: Wed Jan 20, 2010 2:14 pm Post subject: |
|
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
forget it
Last edited by gyanibaba on Sun Jan 31, 2010 3:23 pm; edited 1 time in total |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Jan 20, 2010 2:38 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| gyanibaba wrote: |
when i am makeing client application program, i am also sending cipherspec as below
strcpy(ClientConn.SSLCipherSpec,"TRIPLE_DES_SHA_US");
Then, i am mq server log is saying that i am not sending any cipherspec ?
|
I didn't think applications could specify SSL parameters; I thought (and have always used) channels to do that. Perhaps you'd be kind enough to post the link you're following?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gyanibaba |
| Posted: Wed Jan 20, 2010 2:40 pm Post subject: |
|
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
forget it
Last edited by gyanibaba on Sun Jan 31, 2010 3:24 pm; edited 1 time in total |
|
| Back to top |
|
|
| gyanibaba |
| Posted: Wed Jan 20, 2010 2:47 pm Post subject: |
|
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Jan 20, 2010 2:49 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| gyanibaba wrote: |
| To be more specific, i have below SERVER and CLIENT channel definition on MQ Server machine as below: |
That just seems to be a server connection. I don't see the definition of a client end (presumably because you're using MQCONNX)
| gyanibaba wrote: |
| So where i am making mistake ? |
I'm not saying you are. I'm saying I was unaware you could specify SSL parameters using MQCONNX & when I've used SSL I've used MQCONN and a client connection.
This could easily mean you know more than me on this, hence my request for a link.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Jan 20, 2010 3:00 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gyanibaba |
| Posted: Wed Jan 20, 2010 3:19 pm Post subject: |
|
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
forget it
Last edited by gyanibaba on Sun Jan 31, 2010 3:24 pm; edited 1 time in total |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Jan 20, 2010 5:20 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| gyanibaba wrote: |
It is something like
You have SERVER AND Client Channel definition on MQ server. Then you have ftped channel definition table from Server to some other client machine and on this machine you have used MQCONN call and set MQCHLLIB varibales? |
Exactly that.
| gyanibaba wrote: |
| Is was C++ application ? |
Both C & C++.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gyanibaba |
| Posted: Wed Jan 20, 2010 5:54 pm Post subject: |
|
|
Novice
Joined: 30 Nov 2009
Posts: 14
|
forget it
Last edited by gyanibaba on Sun Jan 31, 2010 3:25 pm; edited 1 time in total |
|
| Back to top |
|
|
|
|
