| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Query about private key in the cert & Cipherspec/suit us |
« View previous topic :: View next topic » |
| Author |
Message
|
| Mangesh1187 |
 Posted: Tue Jun 07, 2016 2:07 am Post subject: Query about private key in the cert & Cipherspec/suit us |
 |
|
Centurion
Joined: 23 Mar 2013
Posts: 116
|
Hi All,
I have recently studied the material about SSL securtites from the web, and now much comfirtable with the SSL & GSK kit understanding.
But still have couple of concerns here.
1. I have created a self signed certificate using the GSK kit in the CMS database.
I can see the certificate only contains the public key only.
My understanding is this is the key that will be shared during the SSL handshake, hence present in the certificate.
I read when we create a self signed certificate , we create private & public key pair. Of which I can see public key in the cert.
If it is generated , where can I see the private key ?
2. During the channel defination , how to come to determine for the perticular CIPHERSPEC/CIPHERCUITE ? Any factors to consider ? |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Jun 07, 2016 2:15 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
This is quite a broad question.
a) you can see the private key by exporting the repository to pk7 and using standard tools
b) read up in the info center and on line all about key algo, key size and cipherspec / ciphersuite correspondance.
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Mangesh1187 |
| Posted: Tue Jun 07, 2016 4:03 am Post subject: |
|
|
Centurion
Joined: 23 Mar 2013
Posts: 116
|
hi ,
Thanks for Reply. Regarding #1
Do you mean exporting the certficate using the -export command ?
i.e. gsk8capicmd -cert -export ? |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Jun 07, 2016 8:14 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
| Mangesh1187 wrote: |
hi ,
Thanks for Reply. Regarding #1
Do you mean exporting the certficate using the -export command ?
i.e. gsk8capicmd -cert -export ? |
No I meant converting the keydb...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
