MQSeries.net :: View topic - MQ Client configuration file with WebSphere MQ Java client

nab054371 · Posted: Thu Mar 17, 2011 8:15 pm Post subject:

Hi,

So I am working on MQ V7.0.1.3 on Windows paltform. In looking through the WebSphere MQ documentation for 7.0.1.0 and it appears that SSL configuration between MQ client and MQ Server can be accomplished using the MQ client configuration file without having to make any code changes at the client end. Now just to be clear, my MQ JAVA client does not use SSL as of today. I have since configured the MQ client configuration file as below:

#* Module Name: mqclient.ini *#
#* Type : WebSphere MQ client configuration file *#
# Function : Define the configuration of a client *#
#* *#
#*******************************************************************#
#* Notes : *#
#* 1) This file defines the configuration of a client *#
#* *#
#*******************************************************************#

SSL:
AltGSKit=NO
OCSPAuthentication=OPTIONAL
OCSPCheckExtensions=NO
SSLFipsRequired=NO
SSLKeyRepository="C:\\MQClientSSL\\key"
SSLKeyResetCount=0
StrictBasicConstraintsValidation=NO
javax.net.ssl.trustStore="C:\\MQClientSSL\\key"
javax.net.ssl.keyStore="C:\\MQClientSSL\\key"
javax.net.ssl.keyStorePassword="xxxxxxxx"

I know the documentation does not make any references to javax, however that was my desperate attempt at getting it to work. It looks like my Websphere MQ java client is not picking this configuration file or my configuration file setup is incorrect. My client errors out with reason code 2397. Just an FYI, my environment variable configurations look as under:
MQJAVAFILEPATH=C:\Program Files\IBM\WebSphere MQ
MQCLNTCF=C:\Program Files\IBM\WebSphere MQ\mqclient.ini

Any leads in getting this resolved would be greatly appreciated.

Thanks in advance.

PS: I have been able to get the SSL configuration to work between client and server using hash table and system properties changes.