| Author |
Message
|
| MQNETrookie |
 Posted: Tue Nov 09, 2010 9:17 pm Post subject: How to convert an MQ CLIENT app from using KDB to JKS? |
 |
|
Novice
Joined: 20 Jun 2009
Posts: 19
|
| I have a .NET client MQ app which is using the KDB as the KEY REPOSITORY. The host needs to upgrade the certificate, but the certificate can't add to a KDB, so JKS is the only option. How to convert a .NET MQ Client app from using KDB to JKS? |
|
| Back to top |
|
 |
| exerk |
| Posted: Tue Nov 09, 2010 10:12 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Why can't the certificate be added?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Nov 10, 2010 2:41 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Does't JKS stand for "Java Key Store"? |
|
| Back to top |
|
|
| shashivarungupta |
| Posted: Wed Nov 10, 2010 3:03 am Post subject: |
|
|
Grand Master
Joined: 24 Feb 2009
Posts: 1343
Location: Floating in space on a round rock.
|
I believe so that he wants to have cert in JKS (Java Key Store) But I agree with 'exerk' as 'Why can't they add the new cert in the existing kdb' !!
_________________
*Life will beat you down, you need to decide to fight back or leave it. |
|
| Back to top |
|
|
| MQNETrookie |
| Posted: Thu Nov 11, 2010 10:21 am Post subject: |
|
|
Novice
Joined: 20 Jun 2009
Posts: 19
|
| Thank you all for responding. I thought the same way too JKS is for java, however the person who provide me the certificate insist that JKS should work the same way as KDB. The problem is when I try to add the certificate to the KDB store, I am getting "An attempted to store the certificate has failed. All the signer certificates must exist in the key database" I am pushing them to send me another certificate. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Nov 11, 2010 11:33 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20703
Location: LI,NY
|
| MQNETrookie wrote: |
| Thank you all for responding. I thought the same way too JKS is for java, however the person who provide me the certificate insist that JKS should work the same way as KDB. The problem is when I try to add the certificate to the KDB store, I am getting "An attempted to store the certificate has failed. All the signer certificates must exist in the key database" I am pushing them to send me another certificate. |
Tell them to send you the certificate chain.
You are likely missing an intermediate certificate. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| exerk |
| Posted: Thu Nov 11, 2010 11:46 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| fjb_saper wrote: |
Tell them to send you the certificate chain.
You are likely missing an intermediate certificate. |
...or the required CA certificate.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
|
|
