| Author |
Message
|
| j1 |
 Posted: Mon Jan 24, 2011 2:44 pm Post subject: different behavior of gsk7ikm on mq client vs server |
 |
|
Centurion
Joined: 23 Jun 2003
Posts: 139
|
Hi,
Recently, I was trying to receive a signed certificate into a cms type kdb. when i tried this on a server with an mq client installation, I got an error that said - " An error occurred receiving the certificate". However when I tried this on an mq server box, it worked fine. the gsk install on both box was in /opt/ibm/gsk so I would think it would be independent of the server vs client install? would anyone know why this is so? both boxes were sun solaris mq6, though I didnt check the specific patch level etc... thanks |
|
| Back to top |
|
 |
| exerk |
| Posted: Mon Jan 24, 2011 3:06 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Does the certificate match a certificate request? Does the signer certificate exist within the kdb? Does the content of the certificate contain strange characters, e.g ^M?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| j1 |
| Posted: Mon Jan 24, 2011 4:42 pm Post subject: |
|
|
Centurion
Joined: 23 Jun 2003
Posts: 139
|
| its the same kdb, thats what I found puzzling. I generated the signing request with gsk on the mq client box. on trying to receive the signed cert, ran into errors. copied the kdb over to an mq server box and tried again, and it worked... no special characters and it was the same kdb.so the root CA existed... |
|
| Back to top |
|
|
| j1 |
| Posted: Mon Jan 24, 2011 4:52 pm Post subject: |
|
|
Centurion
Joined: 23 Jun 2003
Posts: 139
|
| does mq server install do something to the existing gsk installation? |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Jan 25, 2011 12:43 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| j1 wrote: |
| does mq server install do something to the existing gsk installation? |
Not that I am aware of. Were the necessary environment variables set or already in place before running the command to receive the certificate?
| j1 wrote: |
| ...copied the kdb over to an mq server box and tried again, and it worked... |
All the key store files, i.e. *.kdb, *.rdb, *.sth, and certificate file?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| j1 |
| Posted: Tue Jan 25, 2011 4:55 pm Post subject: |
|
|
Centurion
Joined: 23 Jun 2003
Posts: 139
|
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Jan 25, 2011 6:52 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| It seems likely, on no real evidence, that you have not used the right JVM on the client, or the client is at an older FP. |
|
| Back to top |
|
|
|
|
