| Author |
Message
|
| Emret |
 Posted: Thu Dec 22, 2011 11:49 pm Post subject: MQ Client SSL with .kdb using java code |
 |
|
Newbie
Joined: 22 Dec 2011
Posts: 5
|
Hi,
We have an integration with customer and they are using IBM MQ Server.
they sended us a SSL package to connect their MQ server. Now we have 4 files with extension key.kdb, key.sth, key.crl, key.rdb .
we have to write java code for integration.
Is it possible write java code with these files, can i add these files to java key store?
Any help and sample code will be very good.
thanks. |
|
| Back to top |
|
 |
| exerk |
| Posted: Fri Dec 23, 2011 1:19 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
If you are using Java request the client sends the relevant key stores in *.jks format, especially if they have not provided the password for the *.kdb file.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| Emret |
| Posted: Fri Dec 23, 2011 1:47 am Post subject: MQ Client SSL with .kdb using java code |
|
|
Newbie
Joined: 22 Dec 2011
Posts: 5
|
| we are using java jms and have key.sth file for password, i have not *.jks file, my goal is doing this integration with kdb files. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Dec 23, 2011 8:57 am Post subject: Re: MQ Client SSL with .kdb using java code |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| Emret wrote: |
| we are using java jms and have key.sth file for password, i have not *.jks file, my goal is doing this integration with kdb files. |
Then you might have to ask IBM as I understand the cms format to be proprietary. There is however in the gskit a function to transform a cms format store to a jks format store...
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Emret |
| Posted: Sat Dec 24, 2011 1:54 am Post subject: MQ Client SSL with .kdb using java code |
|
|
Newbie
Joined: 22 Dec 2011
Posts: 5
|
thanks for responses, i can not able to convert CMS to JKS because customer provides this SSL certifikate and we dont have password,
if you say that i can't do SSL with kdb files and java code, i will response that we cant do connection with these files. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sat Dec 24, 2011 4:35 pm Post subject: Re: MQ Client SSL with .kdb using java code |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| Emret wrote: |
thanks for responses, i can not able to convert CMS to JKS because customer provides this SSL certifikate and we dont have password,
if you say that i can't do SSL with kdb files and java code, i will response that we cant do connection with these files. |
Ok so now you have mandated that the gskit and the IBM jvm be on your path and classpath...as they are the ones supporting the cms format...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Emret |
| Posted: Sun Dec 25, 2011 11:43 pm Post subject: |
|
|
Newbie
Joined: 22 Dec 2011
Posts: 5
|
| yes we have tried to use these files that they said, any java example will help us i think. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Dec 26, 2011 8:35 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| if you have a stash file, which you do, you should be able to use ikeyman to open the kdb and then create a .jks. |
|
| Back to top |
|
|
| exerk |
| Posted: Mon Dec 26, 2011 8:46 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| mqjeff wrote: |
| if you have a stash file, which you do, you should be able to use ikeyman to open the kdb and then create a .jks. |
The OP has already stated that the password is not known.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Dec 26, 2011 9:10 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| exerk wrote: |
| mqjeff wrote: |
| if you have a stash file, which you do, you should be able to use ikeyman to open the kdb and then create a .jks. |
The OP has already stated that the password is not known. |
well, yes, I saw that. I also saw "key.sth".
I admit it's been a while since i've actually done this, but the existance of the stash file is what allows the gskit to use the keyring without the program trying to call the keyring knowing what the password is. My intuition was that the stash file would also work from an interactive session. Perhaps that's not true, and I'm remembering wrong. |
|
| Back to top |
|
|
| Emret |
| Posted: Fri Dec 30, 2011 3:45 am Post subject: |
|
|
Newbie
Joined: 22 Dec 2011
Posts: 5
|
i requested for jks file and they sended us and my problem solved.
thanks for responses. |
|
| Back to top |
|
|
|
|
