Skip to main content

SSL Security CICS

3 replies [Last post]
Vidya
Offline
Joined: 2011-07-27

Hi,

I have no knowledge on CICS and would require your help for the same.

A SSL certificate is installed on the CICS server ( Keyring Class created - SSLctgt ) and CTG server uses the Keyring class and updates in the configuration file.

I would like to test the SSL with the sample java program ( EciB1.java ) provided by IBM and have created a java keystore and installed the server certificate in the keystore.

When i run the Java program with the following parameters,it gives me an error   " CTG6672E One or more of the SSL protocol properties have not been defined. "

 

C:>java EciB1 ssl://x.x.x.x 2001 cacerts.jks changeit

Please do let me know where exactly i'm doing wrong.

Regards,

Vidya

pcs305
pcs305's picture
Offline
Joined: 2006-03-06
Re: SSL Security CICS

Vidya,

Did you supply all the Properties neccesary?

Here is the example from the Application programming manual for CTG : (Link http://publibfp.dhe.ibm.com/epubs/pdf/c3470562.pdf)

Properties sslProps = new Properties();
sslProps.setProperty(JavaGateway.SSL_PROP_KEYRING_CLASS, strSSLKeyring);
sslProps.setProperty(JavaGateway.SSL_PROP_KEYRING_PW, strSSLPassword);
sslProps.setProperty(JavaGateway.SSL_PROP_CIPHER_SUITES,
"SSL_RSA_WITH_NULL_SHA");
javaGatewayObject = new JavaGateway(strUrl, iPort, sslProps);

Vidya
Offline
Joined: 2011-07-27
Re: SSL Security CICS

Hi,

Thanks very much for the response. I'm currently running the EciB1.java program provided from the samples.

Installed the certificate properly and included the ctgclient.jar in the classpath. Now when i run the program with the following parameters , gettting the below exception.

 

java EciB1 ssl://<GATEWAY HOST> 2008 <Keystore>cacerts.jks <Keystore password>changeit

 

java.io.IOException: CCL6651E: Unable to connect to the Gateway. [address = GATEWAY HOST, port = 2008] [java.io.IOException: CCL6687E: Keyring was tampered with, or password was incorrect]
        at com.ibm.ctg.client.SslJavaGateway.open(SslJavaGateway.java:214)
        at com.ibm.ctg.client.JavaGateway.open(JavaGateway.java:369)
        at com.ibm.ctg.client.JavaGateway.<init>(JavaGateway.java:162)
        at EciB1.main(EciB1.java:120)
 

Please do let me know where i'm doing wrong ? Will it be an issue with the certificate itself ? The certificate is a self-signed certificate generated in CICS. Seems that the certificate was generated correctly and no exceptions are seen in the CTG server.Please do share me with a test java program if you have and that would be really helpful.

 

Regards,

Vidya.

josephvincentd
Offline
Joined: 2008-08-27
Re: SSL Security CICS