| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| AMQ9637, Sun JRE & SSLCAUTH(REQUIRED) |
« View previous topic :: View next topic » |
| Author |
Message
|
| gdt |
 Posted: Thu Aug 13, 2009 5:37 am Post subject: AMQ9637, Sun JRE & SSLCAUTH(REQUIRED) |
 |
|
Newbie
Joined: 24 Nov 2008
Posts: 6
|
I was trying to get out Java MQ6 client talking to our MQ6 server with SSLCAUTH(REQUIRED). It worked fine with SSLCAUTH(OPTIONAL) but whenever I tried it with SSLCAUTH(REQUIRED) I received error AMQ9637: Channel is lacking a certificate.
Eventually, I turned up the technote at http://www-01.ibm.com/support/docview.wss?uid=swg21180643 which suggests that this is an insurmountable error with Sun JRE1.4 and MQ6 - and to use the IBM JRE instead.
Now I can't use the IBM JRE for various reasons. But I'm not using Sun JRE 1.4, either; I'm using Sun JRE1.6.
So my real question is, has anyone out there got a Java client using the Sun JRE working with MQ6 using the SSLCAUTH(REQUIRED) option? i.e. do I have a resolvable configuration/coding error, or am I just stuck until we move to MQ7 (which does apparently support Sun JRE 1.6).
Thanks for any assistance that anyone can offer,
Greg |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Thu Aug 13, 2009 6:25 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Even if you can't use the IBM JRE for real, you should at least use it to confirm that your code is correct and that the channel configuration is correct. |
|
| Back to top |
|
|
| gdt |
| Posted: Thu Aug 13, 2009 10:44 am Post subject: |
|
|
Newbie
Joined: 24 Nov 2008
Posts: 6
|
| mqjeff wrote: |
| Even if you can't use the IBM JRE for real, you should at least use it to confirm that your code is correct and that the channel configuration is correct. |
You're quite right, and I've no idea why I didn't think of that (smacks hand against forehead).
Based on that, I did some further investigating, and the good news it, it does work, under both the IBM JRE and the Sun JRE (1.6) despite the dire warnings about 1.4.
Thanks for the idea!
Greg |
|
| Back to top |
|
|
| rajakmra |
| Posted: Thu Feb 02, 2012 5:39 am Post subject: |
|
|
Newbie
Joined: 20 Dec 2011
Posts: 9
|
Hi All,
We are facing the same issue:
AMQ9637: Channel is lacking a certificate.
EXPLANATION:
The channel is lacking a certificate to use for the SSL handshake. The channel
name is 'SSL.LIQ.CHANNEL' (if '????' it is unknown at this stage in the SSL
processing). The channel did not start.
My Client program is in Windows (Sun JDK) MQ Server is in (Sun Solaris).
How you resolved? Can you please share it to us. |
|
| Back to top |
|
|
| gdt |
| Posted: Thu Feb 02, 2012 6:07 am Post subject: |
|
|
Newbie
Joined: 24 Nov 2008
Posts: 6
|
Sorry, but I can't recall the exact details. However, from my vague memory I think it was simply that the channel in question was incorrectly configured; the documentation in this area isn't (or wasn't at the time) very forthcoming in this area!
Greg |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Feb 03, 2012 8:51 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| gdt wrote: |
Sorry, but I can't recall the exact details. However, from my vague memory I think it was simply that the channel in question was incorrectly configured; the documentation in this area isn't (or wasn't at the time) very forthcoming in this area!
Greg |
Here is a tip: if you are using multiple SSL PEER values for a single identifier (OU), the order in which you request the OU values will matter.
Start with a single OU value until it works and determine the order to request them. Endianness might also matter...(if in nothing else, in the platform the cert req was created...)
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
