MQSeries.net :: View topic - Adding intermediate certificate for 2 MQ client servers

KIT_INC · Posted: Fri Nov 14, 2014 2:52 am Post subject:

I am running MQ V7 and need to set up SSL connection request from 2 Qmgrs from another company. They gave me 2 p7b files (cert1.p7b, cert2.pcb) without any instruction. I convert them to .cer and found out that

cert1.p7b.cer contains
subject=/C=CA/O=aa./OU=Certification Services/CN=cc Issuing CA1
issuer=/C=CA/O=aa./OU=Certification Services/CN=cc Root CA
-----BEGIN CERTIFICATE-----
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-----END CERTIFICATE-----
subject=/C=CA/O=aa./OU=Certification Services/CN=cc Root CA
issuer=/C=CA/O=aa./OU=Certification Services/CN=cc Root CA
-----BEGIN CERTIFICATE-----
yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
-----END CERTIFICATE-----

cert2.p7b.cer contains
subject=/C=CA/O=aa./OU=Certification Services/CN=cc Issuing CA2
issuer=/C=CA/O=aa./OU=Certification Services/CN=cc Root CA
-----BEGIN CERTIFICATE-----
zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz
-----END CERTIFICATE-----
subject=/C=CA/O=aa./OU=Certification Services/CN=cc Root CA
issuer=/C=CA/O=aa./OU=Certification Services/CN=cc Root CA
-----BEGIN CERTIFICATE-----
yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
-----END CERTIFICATE-----

The second certificate of both files are identical.

Please correct me if I am wrong. I think the second certificate which is identical in both cert1.cer and cert2.cer is the root cert where as the first certificate in the 2 files are intermediate certs. In order for my QM to do SSL handshake with the 2 external Qmgrs, I need to extract the 2 certificated from the p7b files and receive (or add) the root cert and the 2 intermediate certs to the key store of my QM.