| Author |
Message
|
| tanbsj |
 Posted: Wed Apr 18, 2007 6:22 pm Post subject: MQ SSL SETUP BETWEEN VSE/ESA AND AIX |
 |
|
Novice
Joined: 08 Jun 2003
Posts: 16
|
Hi
Does anyone have successfully setup the MQ ssl between VSE/ESA 2.7 and AIX server? My knowlegde on this area is limited.
I have being trying to get it running but not successfully.
We are running VSE/ESA 2.7 and TCP 150D.
Always get SSL Initialization failed in the VSE/ESA MQ system log.
What kind of cipher is support for the VSE/ESA?
Please advise and help. Need the advise urgently.
Thank you in advance. |
|
| Back to top |
|
 |
| marcin.kasinski |
| Posted: Wed Apr 18, 2007 10:48 pm Post subject: Re: MQ SSL SETUP BETWEEN VSE/ESA AND AIX |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
Hi,
Have you checked MQ error logs on both sides ?
Source of all my SSL problems was explained in MQ logs.
_________________
Marcin |
|
| Back to top |
|
|
| tanbsj |
| Posted: Thu Apr 19, 2007 1:33 am Post subject: MQ SSL SETUP BETWEEN VSE/ESA AND AIX |
|
|
Novice
Joined: 08 Jun 2003
Posts: 16
|
Hi marcin.kasinski
Yes, the log shown SSL initialization failed.
Did you get the ssl channel up and running between vse/esa and aix?
Can you guide me.
Please advise
Thank you. |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Thu Apr 19, 2007 1:46 am Post subject: Re: MQ SSL SETUP BETWEEN VSE/ESA AND AIX |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
| tanbsj wrote: |
Hi marcin.kasinski
Yes, the log shown SSL initialization failed.
Did you get the ssl channel up and running between vse/esa and aix?
Can you guide me.
Please advise
Thank you. |
No,
I've never configured SSL between vse/esa and aix but I think now it doesn't matter in this situation.
I know that there is always additional info with SSL initialization failed error message
- handshake
- lack of certificate
- ...
- different cipherspecs between qmgrs
- unsupported cipherspec
Check on both QMs
{MQDIR}/qmgrs/{QMNAME}/errors/
and
{MQDIR}/errors/
_________________
Marcin |
|
| Back to top |
|
|
| wschutz |
| Posted: Thu Apr 19, 2007 6:22 am Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
What have you done on the VSE side? For example, have you created a keyring file (using keyman_vse, for example) and specified it in the global system definitions? There
is a good amount of detail on settng up VSE SSL in the MQ VSE redbook (section 7.1);
http://www.redbooks.ibm.com/abstracts/sg245647.html
_________________
-wayne |
|
| Back to top |
|
|
|
|
