MQSeries.net :: View topic

scar · Posted: Sun Jun 15, 2008 4:11 pm Post subject:

I created key repository an bot the qmgrs and am using self signed certificates
When I start the channel i am getting the following error

06/13/08 13:27:13 - Process(1056768.1) User(mqm) Program(amqrcmla)
AMQ9660: SSL key repository: password stash file absent or unusable.

EXPLANATION:
The SSL key repository cannot be used because MQ cannot obtain a password to
access it. Reasons giving rise to this error include:
(a) the key database file and password stash file are not present in the
location configured for the key repository,
(b) the key database file exists in the correct place but that no password
stash file has been created for it,
(c) the files are present in the correct place but the userid under which MQ is
running does not have permission to read them,
(d) one or both of the files are corrupt.

The channel is 'SSL1.TO.SSL0'; in some cases its name cannot be determined and
so is shown as '????'. The channel did not start.
ACTION:
Ensure that the key repository variable is set to where the key database file
is. Ensure that a password stash file has been associated with the key database
file in the same directory, and that the userid under which MQ is running has
read access to both files. If both are already present and readable in the
correct place, delete and recreate them. Restart the channel.

I deleted the Key repository and created it couple times but no use..

root@green:/var/mqm/qmgrs/QMGR_SSL0/errors # echo dis qmgr sslkeyr | runmqsc QMGR_SSL0
5724-H72 (C) Copyright IBM Corp. 1994, 2005. ALL RIGHTS RESERVED.
Starting MQSC for queue manager QMGR_SSL0.

1 : dis qmgr sslkeyr
AMQ8408: Display Queue Manager details.
QMNAME(QMGR_SSL0)
SSLKEYR(/var/mqm/qmgrs/QMGR_SSL0/ssl/key)
One MQSC command read.
No commands have a syntax error.
All valid MQSC commands were processed.

/var/mqm/qmgrs/QMGR_SSL1/errors $ echo dis qmgr sslkeyr | runmqsc QMGR_SSL1
5724-H72 (C) Copyright IBM Corp. 1994, 2005. ALL RIGHTS RESERVED.
Starting MQSC for queue manager QMGR_SSL1.

1 : dis qmgr sslkeyr
AMQ8408: Display Queue Manager details.
QMNAME(QMGR_SSL1)
SSLKEYR(/var/mqm/qmgrs/QMGR_SSL1/ssl/key)
One MQSC command read.
No commands have a syntax error.
All valid MQSC commands were processed.

FILES and permissions

mqm@green:/var/mqm/qmgrs/QMGR_SSL0/ssl $ ls -ltr
total 272
-rw-r----- 1 mqm mqm 129 Jun 13 13:02 green.sth
-rw-r----- 1 mqm mqm 80 Jun 13 13:18 green.rdb
-rw-r----- 1 mqm mqm 125080 Jun 13 13:18 green.kdb
-rw-r----- 1 mqm mqm 80 Jun 13 13:18 green.crl

/var/mqm/qmgrs/QMGR_SSL1/ssl $ ls -ltr
total 272
-rw-r----- 1 mqm mqm 129 Jun 13 12:57 olive.sth
-rw-r----- 1 mqm mqm 80 Jun 13 13:15 olive.rdb
-rw-r----- 1 mqm mqm 125080 Jun 13 13:15 olive.kdb
-rw-r----- 1 mqm mqm 80 Jun 13 13:15 olive.crl

When I created the database i stashed the password
but when I try to stash it again i am getting the following error

/var/mqm/qmgrs/QMGR_SSL1/ssl $ gsk7cmd -keydb -stashpw -db olive.kdb -pw ------------------
The specified database has been corrupted.

Any help is appreciated