| Author | 
		  Message
		 | 
		
		  | pintrader | 
		  
		    
			  
				 Posted: Wed Sep 17, 2014 4:04 am    Post subject: gsk8 conversion of keystore to JKS format | 
				     | 
			   
			 
		   | 
		
		
		   Disciple
 
 Joined: 22 Jan 2014 Posts: 164
  
  | 
		  
		    
			  
				hi
 
I have created a keystore (.kdb) extension using gsk8 (or rather runmqakm). Now I just found out that my applications use JKS. I tried to search around and found some information on gsk6 and that it supports the JKS format. However now, gsk8 doesn't support JKS. Only PKCS12 and p12 ( there is also cms/kdb).
 
 
How can I convert by kdb keystore to JKS format?
 
 
thanks | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | fjb_saper | 
		  
		    
			  
				 Posted: Wed Sep 17, 2014 4:38 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Grand High Poobah
 
 Joined: 18 Nov 2003 Posts: 20768 Location: LI,NY 
  | 
		  
		    
			  
				Have you tried using runmqckm for the conversion?
 
If you need to stay FIPS compliant, convert to PKCS12 and then from PKCS12 to JKS using a FIPS compliant tool. (Like keytool if your implementation of Java JSSE is FIPS compliant.) Or use the PKCS12 repository directly in Java...
 
 
Have fun   _________________ MQ & Broker admin | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | pintrader | 
		  
		    
			  
				 Posted: Wed Sep 17, 2014 5:38 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Disciple
 
 Joined: 22 Jan 2014 Posts: 164
  
  | 
		  
		    
			  
				
   
	| fjb_saper wrote: | 
   
  
	Have you tried using runmqckm for the conversion?
 
If you need to stay FIPS compliant, convert to PKCS12 and then from PKCS12 to JKS using a FIPS compliant tool. (Like keytool if your implementation of Java JSSE is FIPS compliant.) Or use the PKCS12 repository directly in Java...
 
 
Have fun :innocent: | 
   
 
 
 
Thanks for replying. I have not tried runmqckm before. but yes, you are right, it does support jks. I tried just now and a jks file was created. So i just pass this jks file to them to input to their java program and it should work right?
 
 
If that's the case, I really should use runmqckm instead of runmqakm. Actually what is the real difference between these 2 commands?
 
thanks again. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | exerk | 
		  
		    
			  
				 Posted: Wed Sep 17, 2014 5:42 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Council
 
 Joined: 02 Nov 2006 Posts: 6339
  
  | 
		  
		    
			  
				
   
	| pintrader wrote: | 
   
  
	...what is the real difference between these 2 commands?
 
... | 
   
 
 
Knowledge Centre _________________ It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | mqjeff | 
		  
		    
			  
				 Posted: Wed Sep 17, 2014 5:43 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Grand Master
 
 Joined: 25 Jun 2008 Posts: 17447
  
  | 
		  
		    
			  
				
   
	| exerk wrote: | 
   
  
	| Knowledge Centre | 
   
 
 
Although we promise it won't help with your Black Cab exam. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | 
		    
		   |