| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Unable to import a certificate into Key store |
« View previous topic :: View next topic » |
| Author |
Message
|
| krys |
 Posted: Fri May 28, 2010 10:40 am Post subject: Unable to import a certificate into Key store |
 |
|
Novice
Joined: 28 May 2010
Posts: 10
|
I am suppose to call a webservice via https, as part of this requirement I have created a key store and trying to import the SSL certificate (from target server) into the Message Broker V6.1 keystore using the following command.
gsk7cmd -cert -import -db devpartner_ssl_certificate.p12 -pw xxx -label CACert -type pkcs12 -target /var/mqsi/components/DBRK02/config/DBRK02.jks -target_pw
xxxxx
It's giving me the following exception
The specified database has been corrupted
Has any one come across this kind of issue? Please advice.
-KRYS  |
|
| Back to top |
|
 |
| harish_td |
| Posted: Sat May 29, 2010 9:18 pm Post subject: |
|
|
Master
Joined: 13 Feb 2006
Posts: 236
|
Are you able to list the contents/certificates of this key-store using the same password which you are using for the IMPORT?
If you cannot list the contents, you cannot do the IMPORT |
|
| Back to top |
|
|
| AndreasMartens |
| Posted: Fri Jun 04, 2010 2:13 am Post subject: |
|
|
Acolyte
Joined: 30 Jan 2006
Posts: 65
Location: Hursley, UK
|
Since you're modifying a jks keystore, why not call java's keytool directly?
keytool -importkeystore -srckeystore devpartner_ssl_certificate.p12 -destkeystore /var/mqsi/components/DBRK02/config/DBRK02.jks.jks -srcstoretype pkcs12 -deststoretype jks -srcstorepass pa55word -deststorepass pa55word
hope this helps,
Andreas |
|
| Back to top |
|
|
| amitjain1984 |
| Posted: Tue Dec 20, 2016 9:28 pm Post subject: gsk7cmd - import error - specified database is corrupted |
|
|
Newbie
Joined: 20 Dec 2016
Posts: 4
|
Hi Team,
I am trying to do certificate management using gsk7cmd command on linux.
But getting error
"The specified database has been corrupted." while importing in last command. Please suggest what I am doing wrong.
#To create and initialize a new key database
gsk7cmd -keydb -create -db key_database.kdb -pw AmitJain1 -expire 365;
#create certificate
gsk7cmd -cert -create -db key_database.kdb -pw AmitJain1 -size 1024 -dn "CN=mysite . com,OU=MYOU,O=my site,L=chennai,ST=Tamil Nadu,C=IN" -label ibmwebspheremqmq_ssl;
#extract the certificate
gsk7cmd -certreq -extract -db key_database.kdb -pw AmitJain1 -target ibmwebspheremqmq_ssl.arm -label ibmwebspheremqmq_ssl;
gsk7cmd -keydb -create -db jbossper.jks -pw AmitJain1 -type jks;
gsk7cmd -cert -create -db jbossper.jks -pw AmitJain1 -size 1024 -dn "CN=mysite . com,OU=MYOU,O=my site,L=chennai,ST=Tamil Nadu,C=IN" -label jbossperskey;
gsk7cmd -certreq -extract -db jbossper.jks -pw AmitJain1 -target jbosskey.arm -label jbossperskey;
gsk7cmd -keydb -create -db Newtruststore.jks -pw AmitJain1 -type jks;
gsk7cmd -cert -import -file ibmwebspheremqmq_ssl.arm -pw AmitJain1 -type kdb -label ibmwebspheremqmq_ssl -target Newtruststore.jks -target_pw AmitJain1 -target_type jks
Environment details :
Name: WebSphere MQ
Version: 7.0.1.3
CMVC level: p701-103-100813
BuildType: IKAP - (Production)
export JAVA_HOME=/opt/mqm/ssl/jre
export PATH=/opt/mqm/java/jre/bin:$PATH |
|
| Back to top |
|
|
| amitjain1984 |
| Posted: Tue Dec 20, 2016 11:47 pm Post subject: |
|
|
Newbie
Joined: 20 Dec 2016
Posts: 4
|
Hi Team,
It is working fine now. I have changed import file to key store database , previously i was passing extracted certificate file name as parameter.
Thanks.
gsk7cmd -cert -import -file key.kdb -pw AmitJain1 -type cms -label ibmwebspheremqmq_ssl -target Newtruststore.jks -target_pw AmitJain1 -target_type jks;
Also below command printing the details fine now.
gsk7cmd -cert -details -db Newtruststore.jks -pw polaris123 -label ibmwebspheremqmq_ssl;
Thanks |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
