HTTPS Acceptor

Posted by Admin on 03-Dec-2009 10:47

Hi,

I am creating https Acceptor with RSA SSL.

I followed the steps which are given in mq_deploy 7.6 doc.

After setting up this broker I tried to access this URL through browser but I am getting error "Page cannot displayed".

but on the broker I checked log I am getting this kind of error

MgmtBroker (warning) Https connection error occurred.. Reason=Could not load the private key: unable to create private key: Could not unwrap private key., Client IP=127.0.0.1

can anyone help me in this issue?

All Replies

Posted by Bill Wood on 05-Dec-2009 10:46

Did you set the acceptor for mutual, or just client authentication?  You should do it for client.   Also, if you are using an old version of Sonic, then the certificates might have expired, but then you'd see the issue on the browser (you'd get the ypeerror about expired certs).

That being said, I don't think that the error about the "Page cannot be displayed" error is this problem.  If you had a security error, you'd get the browser to say that.   Page cannot be displayed normally means the response does not have the expected Content-Type.

So some follow up:

- what are you returning when an https request is returned?  Is content-type set?

- the browser has a "view source" or a "view properties" of the page -- check that.  It may have more information.

- use a tcp/ip sniffer.  That will also help see what is returned from Sonic.

Typically, the http acceptors are not easily used from a browser.  They are more for "HTTP" transport from applications.  Browsers are aimed at UI applications from web servers and need all the relevatn content-type or file type (e.g. .html .xml) extension on the URL to figure out how to display it.  Sonic brokers really are not a good match for this.

Posted by Admin on 07-Dec-2009 03:09

Hi William,

Thanks for reply,

I checked my acceptor setting again it was because of wrong password and typo error while setting user name.

I have corrected this and checked.

Now its working fine with our application.I don't need certificate at client side.Its working without that.

Thanks,

Yashwant

This thread is closed