MQSeries.net :: View topic

sudhir · Posted: Tue Jun 05, 2012 7:56 am Post subject:

Hi Team,

While configuring MQ one way SSL ( Client - > Server) , I am facing following error

----- amqccita.c : 611 --------------------------------------------------------
06/05/12 12:54:29 - Process(14549178.1) User(esbadmin) Program(amqsputc_nd)
Host(HEIMBRKD01)
AMQ9657: The key repository could not be opened (channel 'SSL.CLIENTS').

EXPLANATION:
The key repository could not be opened. The key repository either does not
exist or has incorrect permissions associated with it. The channel is
'SSL.CLIENTS'; in some cases its name cannot be determined and so is shown as
'????'. The channel did not start.
ACTION:
Ensure that the key repository you specify exists and that its permissions are
such that the MQ process involved can read from it. Restart the channel.
----- amqccisa.c : 4007 -------------------------------------------------------

channel properties are as follows
dis chl(SSL.CLIENTS)
2 : dis chl(SSL.CLIENTS)
AMQ8414: Display Channel details.
CHANNEL(SSL.CLIENTS) CHLTYPE(SVRCONN)
ALTDATE(2012-06-04) ALTTIME(19.01.15)
COMPHDR(NONE) COMPMSG(NONE)
DESCR( ) HBINT(300)
KAINT(AUTO) MAXINST(999999999)
MAXINSTC(999999999) MAXMSGL(4194304)
MCAUSER( ) MONCHL(QMGR)
RCVDATA( ) RCVEXIT( )
SCYDATA( ) SCYEXIT( )
SENDDATA( ) SENDEXIT( )
SHARECNV(10) SSLCAUTH(OPTIONAL)
SSLCIPH(TRIPLE_DES_SHA_US) SSLPEER( )
TRPTYPE(TCP)
AMQ8414: Display Channel details.
CHANNEL(SSL.CLIENTS) CHLTYPE(CLNTCONN)
AFFINITY(PREFERRED) ALTDATE(2012-06-04)
ALTTIME(19.01.51) CLNTWGHT(0)
COMPHDR(NONE) COMPMSG(NONE)
CONNAME(10.87.188.156(33333)) DESCR( )
HBINT(300) KAINT(AUTO)
LOCLADDR( ) MAXMSGL(4194304)
MODENAME( ) PASSWORD( )
QMNAME( ) RCVDATA( )
RCVEXIT( ) SCYDATA( )
SCYEXIT( ) SENDDATA( )
SENDEXIT( ) SHARECNV(10)
SSLCIPH(TRIPLE_DES_SHA_US) SSLPEER( )
TPNAME( ) TRPTYPE(TCP)
USERID( )

Following steps have followed for SSL configuration
On MQ server
1. gsk7cmd -keydb -create -db key.db -pw password -type cms -expire 360 -stash
2. gsk7cmd -cert -create -db key.db -pw password -label ibmwebspheremqtestqm
-dn "CN=EAI, O=IBM, OU=Test, C=IN" -size 2048 -x509version version -expire 360
3. gsk7cmd -cert -extract -db key.db -pw password -label ibmwebspheremqtestqm -target ssl.arm
-format ascii

copied ssl.arm to client location
On Client Server
1. gsk7cmd -keydb -create -db key.db -pw password -type cms -expire 360 -stash
2. gsk7cmd -cert -add -db key.db -pw password -label sslqm -file ssl.arm -format ascii

Following Env. variables are set
MQCHLLIB
MQCHLTAB
MQSSLKEYR ( without .db extn)

Also I have given full permission to certificate files (777) still I am facing this error .
Could you please let us know where things go wrong

Regards
Sudhir