| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| amqmcert query |
« View previous topic :: View next topic » |
| Author |
Message
|
| MQAltaf |
 Posted: Wed Nov 25, 2009 2:29 am Post subject: amqmcert query |
 |
|
Centurion
Joined: 10 Feb 2005
Posts: 119
|
Hi,
We have an ssl.sto file and am trying to determine which private cert
is bound to MQ client. However when I run the command I get the
following :-
E:\Documents and Settings\pa29523>amqmcert -l -k E:\APPLICATIONS\Common\MTS\GMISender\certificates\ssl
5724-B41 (C) Copyright IBM Corp. 1994, 2002. ALL RIGHTS RESERVED.
Using CURRENT_USER for default system stores.
AMQ4809: No certificate has been assigned to this WebSphere MQ client.
Enumerating Certificate Stores:
WebSphere MQ Client Store (E:\APPLICATIONS\Common\MTS\GMISender\certificates\ssl):
------------------------------------------------------------------------
--------
--
02001: MINBI0001_New, Pre-Production Level2 CA1
02002: Pre-Production Level1 CA, Pre-Production Level1 CA
02003: * MINBI0001, Pre-Production Level2 CA1
02004: Pre-Production Level2 CA1, Pre-Production Level1 CA
02005: Pre-Production Level2 CA1, Pre-Production Level1 CA
This indicates that there isnt a private cert bound to MQ yet it seems
to be working fine. As you can see there are two private certs,
MINBI0001_New and MINBI0001. What we need to determine is which cert is
being used by the MQ Client.
MQ Client 5.3
Any help would be appreciated
Last edited by MQAltaf on Wed Nov 25, 2009 3:19 am; edited 3 times in total |
|
| Back to top |
|
 |
| exerk |
| Posted: Wed Nov 25, 2009 2:57 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
May I suggest that next time you redact the issuer as it is an 'internal' CA rather than a commercial?
Note, it states "...Using CURRENT_USER for default system stores...", and that user will be pa29523, i.e. the logged in user. What result do you see when you run it under the actual client ID?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| MQAltaf |
| Posted: Wed Nov 25, 2009 3:16 am Post subject: |
|
|
Centurion
Joined: 10 Feb 2005
Posts: 119
|
Hi,
Thanks for the reponse.
Not sure what you mean by client ID. MQ and the App which interfaces with MQ is running under the local system account |
|
| Back to top |
|
|
| exerk |
| Posted: Wed Nov 25, 2009 3:44 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
The label of the clients certificate should be ibmwebspheremq<client userid> (but there are exceptions - see HERE). That should give you the userid to query the key store against.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| MQAltaf |
| Posted: Wed Nov 25, 2009 5:01 am Post subject: |
|
|
Centurion
Joined: 10 Feb 2005
Posts: 119
|
Hi,
The label of the client certs wasnt set to ibmwebspheremq<client userid>. These are #12 certs and the following commands used to import them, etc
amqmcert -a -s <root ca file>
amqmcert -a -s <issuing ca file>
amqmcert -a -p <server p12 file> -z <passphrase>
amqmcert -l
amqmcert -d <handle> |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
