|   | 
	 
  
    | 
RSS Feed - WebSphere MQ Support
 | 
RSS Feed - Message Broker Support
 |   
 
  
	     | 
	 | 
   
 
  
	|  SSL problem with MQSeries 5.3 on AIX 4.3.3 | 
	« View previous topic :: View next topic »  | 
   
  
  	
	  
		
		
		  | Author | 
		  Message
		 |  
		
		  | mhk | 
		  
		    
			  
				 Posted: Wed Jan 05, 2005 8:44 pm    Post subject: SSL problem with MQSeries 5.3 on AIX 4.3.3 | 
				     | 
			   
			 
		   | 
		 
		
		   Newbie
 
 Joined: 05 Jan 2005 Posts: 1
  
  | 
		  
		    
			  
				Hi,
 
 
I am getting below error whenever I try to generate CMS keydatabase
 
 
gsk6cmd -keydb -create -file key.kdb -type cms -stash
 
 
When I used gks6cmd with version 6.0.0.4, I got below error 
 
 
"unable to load jkpcs11 library "
 
 
then one of the forum advised me to upgrade to MQ 5.3 CSD07  and
 
 gskit 6.0.0.37.  With that I am facing below error :
 
 
"An error occured while inserting keys to the database"
 
 
 I've checked the JAVA_HOME path and copied all the required jar files from gskit area to JAVA_HOME/jre/lib/ext dir.
 
 
As another option,  I tried generating the key store with key.p12  (-type pkcs12)  format as givnen in the manual without stashing password, I worked but when I incorporate this  into MQ- secure channel, it gave me an error like 'unable to find stash password file". 
 
 
 Is there any MQ  settings specify to  key database is pkcs12 format instead of CMS. I think by default its taking as CMS type.
 
 
Can some one help me ? Thanks in advance.
 
 
Regards,
 
Manjunatha | 
			   
			 
		   | 
		 
		
		  | Back to top | 
		  
		  	
		   | 
		 
		
		    | 
		 
		
		  | Anirud | 
		  
		    
			  
				 Posted: Thu Jan 06, 2005 7:49 am    Post subject:  | 
				     | 
			   
			 
		   | 
		 
		
		    Master
 
 Joined: 12 Feb 2004 Posts: 285 Location: Vermont 
  | 
		  
		    
			  
				From System Admin., Guide... Chapter 18
 
   
	| Quote: | 
   
  
	Create a CMS key database: 
 
gsk6cmd -keydb -create -db filename -pw password -type cms -expire days -stash | 
   
 
 
 
You will have to set JAVA_HOME environment variable before running this command
 
   
	| Quote: | 
   
  
	| export JAVA_HOME=/usr/mqm/ssl/jre | 
   
 
 
This is on AIX.  For Solaris or Linux, it will be /opt/mqm/ssl/jre | 
			   
			 
		   | 
		 
		
		  | Back to top | 
		  
		  	
		   | 
		 
		
		    | 
		 
		
		  | csmith28 | 
		  
		    
			  
				 Posted: Thu Jan 06, 2005 8:04 am    Post subject:  | 
				     | 
			   
			 
		   | 
		 
		
		    Grand Master
 
 Joined: 15 Jul 2003 Posts: 1196 Location: Arizona 
  | 
		  
		    
			  
				Also on AIX Servers you may need to install some C++ filesets.  The versions I had to install for AIX5.1.0.0 / WMQ5.3.0.6 were:
 
   
	| Code: | 
   
  
	
 
 # lslpp -ha "xlC.*"
 
  Fileset         Level     Action       Status       Date         Time
 
  ----------------------------------------------------------------------------
 
Path: /usr/lib/objrepos
 
  xlC.adt.include
 
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     01:22:27
 
                  6.0.0.0   APPLY        COMPLETE     02/11/04     01:22:27
 
 
  xlC.aix50.rte
 
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     01:22:35
 
                  6.0.0.0   APPLY        COMPLETE     02/11/04     01:22:35
 
                 6.0.0.14   COMMIT       COMPLETE     09/05/04     15:21:44
 
                 6.0.0.14   APPLY        COMPLETE     09/05/04     15:21:38
 
 
  xlC.cpp
 
                  5.0.2.0   COMMIT       COMPLETE     02/11/04     02:14:48
 
                  5.0.2.0   APPLY        COMPLETE     02/11/04     02:14:48
 
 
  xlC.msg.en_US.cpp
 
                  5.0.2.0   COMMIT       COMPLETE     02/11/04     02:14:55
 
                  5.0.2.0   APPLY        COMPLETE     02/11/04     02:14:55
 
 
  xlC.msg.en_US.rte
 
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     02:27:31
 
                  6.0.0.0   APPLY        COMPLETE     02/11/04     02:27:31
 
 
  xlC.rte
 
                  6.0.0.0   COMMIT       COMPLETE     02/11/04     01:22:49
 
                  6.0.0.0   APPLY        COMPLETE     02/11/04     01:22:49
 
 | 
   
 
 _________________ Yes, I am an agent of Satan but my duties are largely ceremonial. | 
			   
			 
		   | 
		 
		
		  | Back to top | 
		  
		  	
		   | 
		 
		
		    | 
		 
		
		  | 
		    
		   | 
		 
	   
	 | 
   
 
  
	     | 
	 | 
	Page 1 of 1 | 
   
 
 
 
  
  	
	  
		
		  
 
  | 
		  You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
  | 
  		 
	   
	 | 
   
 
  	 | 
	  |