| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Setting up SSL Key repository |
« View previous topic :: View next topic » |
| Author |
Message
|
| MQMB&WAS |
 Posted: Sun Jan 08, 2017 6:21 pm Post subject: Setting up SSL Key repository |
 |
|
Centurion
Joined: 12 Jun 2016
Posts: 130
|
Hello Friends,
I'm trying to configure SSL security on my system and I'm following the KC http://www.ibm.com/support/knowledgecenter/SSFKSJ_7.5.0/com.ibm.mq.sec.doc/q012660_.html.
Need your help in understanding the below, appreciate any help.
I created a new key database file with name key.kdb and checked the stash password to a file option.(using ikeyman on linux)
In the default ssl directory, /var/mqm/qmgrs/QM1/ssl, I see the below files.
1. key.kdb from what I understand, in this file, the personal certificate of the local qmgr, public part of other qmgrs and CA certificates are stored. correct ?
2. ked.sth this is where the password that I stashed while creating the kdb is stored?
3. key.rdb. ????
could someone spare some time and tell me if I'm understating it correctly and also explain what key.rdb file is? |
|
| Back to top |
|
 |
| bruce2359 |
| Posted: Sun Jan 08, 2017 6:49 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
A quick google search for key.rdb should answer your questions.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| exerk |
| Posted: Mon Jan 09, 2017 1:50 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Think of the files as:
*.kdb - key data base
*.rdb - request data base
And I suggest you think of a more reasonable naming standard than key.* - there's a recipe for disaster just waiting...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| cgache |
| Posted: Fri Jan 27, 2017 6:37 pm Post subject: |
|
|
Apprentice
Joined: 27 May 2013
Posts: 28
Location: Sydney, AUS
|
| the .rdb file gets created automatically with the .kdb file. any modifications to the .kdb file will also modify the .rdb file, so make sure you always have the matching pairs - otherwise your SSL set up won't work. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
