ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Webservice SSL certificate Installation Issue

Post new topic  Reply to topic
 Webservice SSL certificate Installation Issue « View previous topic :: View next topic » 
Author Message
chikku
PostPosted: Mon Aug 19, 2013 5:39 am    Post subject: Webservice SSL certificate Installation Issue Reply with quote

Newbie

Joined: 19 Aug 2013
Posts: 9

Hi

I am trying to install the SSL certificate in production Broker.

I recieved a .p7b file from CA.When I tried importing the certificate using the below command

gsk7cmd -cert -import -db certnew.p7b -label rootCert -type pkcs12 -target PRBR01.jks

I get the below error
A password is required to access the source key database.
Please enter a password:


An IO Exception has occurred:
DerInputStream.getLength(): lengthTag=127, too big.


Can anyone help me sort this.
Back to top
View user's profile Send private message
lancelotlinc
PostPosted: Mon Aug 19, 2013 5:43 am    Post subject: Reply with quote

Jedi Knight

Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA

Default passwords for keystores are 'changeit'.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER
Back to top
View user's profile Send private message Send e-mail
chikku
PostPosted: Mon Aug 19, 2013 5:57 am    Post subject: Reply with quote

Newbie

Joined: 19 Aug 2013
Posts: 9

Thanks for the reply but I had already set the password while creating the keystore.Also I tried the default password change it.

Its the same error as above.

Is it anything to do with the certificate provided.
Back to top
View user's profile Send private message
lancelotlinc
PostPosted: Mon Aug 19, 2013 6:04 am    Post subject: Reply with quote

Jedi Knight

Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA

These are the step-by-step instructions.

You could use keytool to see if the results are different.

http://publib.boulder.ibm.com/infocenter/wmbhelp/v8r0m0/index.jsp?topic=%2Fcom.ibm.etools.mft.doc%2Fap34020_.htm

When you follow these instructions exactly, what are your results ?
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER
Back to top
View user's profile Send private message Send e-mail
chikku
PostPosted: Mon Aug 19, 2013 6:14 am    Post subject: Reply with quote

Newbie

Joined: 19 Aug 2013
Posts: 9

Have used the same link to execute the commands The first 2 commands have been successful.I started getting the error as above while executing the below step.

Importing a certificate for production use

Import a personal certificate from a certificate authority for production use.

Issue the following command:
Code:
gsk7cmd -cert -import
  -db pkcs12_file_name
  [-pw pkcs12_password]
  -label label
  -type pkcs12
  -target keystore_name
  [-target_pw keystore_password][code][/code][code][/code]


Last edited by chikku on Mon Aug 19, 2013 6:18 am; edited 1 time in total
Back to top
View user's profile Send private message
lancelotlinc
PostPosted: Mon Aug 19, 2013 6:16 am    Post subject: Reply with quote

Jedi Knight

Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA

Try keytool. Note keytool has different switches on its command line. Please use [c o d e ] tags here in the forum (please edit your above posts).
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER
Back to top
View user's profile Send private message Send e-mail
chikku
PostPosted: Mon Aug 19, 2013 6:29 am    Post subject: Reply with quote

Newbie

Joined: 19 Aug 2013
Posts: 9

The command got executed successfully
Back to top
View user's profile Send private message
lancelotlinc
PostPosted: Mon Aug 19, 2013 6:32 am    Post subject: Reply with quote

Jedi Knight

Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA

chikku wrote:
The command got executed successfully


Wonderful ! Note that the gsk package gets updated from time-to-time. You might have a really old version of it. You should download latest from IBM site if you intend on using it. Else you can continue to use keytool.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER
Back to top
View user's profile Send private message Send e-mail
chikku
PostPosted: Mon Aug 19, 2013 9:58 pm    Post subject: Reply with quote

Newbie

Joined: 19 Aug 2013
Posts: 9

ok will do that.Thanks a lot.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Webservice SSL certificate Installation Issue
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.