connect Tibco EMS using SSL

[Parth Desai]

How can I connect to ssl://localhost:7243 using Administartor Console

 

I used by default certificates provided by Tibco.

 

I am trinig to connet through EMS Administration tool by following commnad:

 

connect ssl://localhost:7243

 

Login:admin

Password:password

 

I am getting this error.

 

Failed connect to 'ssl://localhost:7243' : error=11, message=Server not connected

 

Please anyone can help me on this

 

Any suggetion would be great.

 

Thanks

Parth

[Manoj Chaurasia]

Hi!Please check your tibmsd.conf file. Looks like you have not configured it for ssl connection. Edit it with following: This information is in tibemsdssl.conf. You can copy/paste from there too.

ssl_server_identity = certs/server.cert.pem

ssl_server_key = certs/server.key.pem

ssl_password = $man$WjtSRCpaXu7hoTkDlcEPr6KNKRr

 

# Trusted issuers of client certificates. Supports PEM, DER and PKCS7.

ssl_server_trusted = certs/client_root.cert.pem

 

Once you edit it and save it, you should be able to connect to ssl.

 

I hope this helps you.

 

....Mvpworld

[Manoj Chaurasia]

Hey folks,

 

Does anybody know what could be the problem in my Tibco SSL configuration, that is the configuration of my tibemsd.conf file:

 

ssl_server_identity = certs/server.cert.pem

ssl_server_key = certs/server.key.pem

ssl_password = $man$WjtSRCpaXu7hoTkDlcEPr6KNKRr

 

# Trusted issuers of client certificates. Supports PEM, DER and PKCS7.

ssl_server_trusted = certs/client_root.cert.pem

 

and when i try to connect to the ems server, the sample application throws following exception:

javax.jms.JMSSecurityException: Failed to connect via SSL to [ssl://xxx.xxx.xxx.xxx:7243]: java.security.cert.CertificateException: Untrusted Server Certificate Chain

 

The sample application is using the following paramiters

ssl_identity = "certs/client_identity.p12";

ssl_password = "password"

ssl_trusted = "certs/server_root.cert.pem"

 

any suggestions will be highly appreciated

[Lamb Liu]

I am facing the same problem with your suggestion, Is any other steps we missed