AMQ9660E:SSL密钥存储库：密码隐藏文件缺失或不可用

在使用IBMMQV9.2.0的Linux上，我看到了以下错误

EXPLANATION:
The SSL key repository cannot be used because MQ cannot obtain a password to access it. Reasons giving rise to this error include:
(a) the key database file and password stash file are not present in the location configured for the key repository,
(b) the key database file exists in the correct place but that no password stash file has been created for it,
(c) the files are present in the correct place but the userid under which MQ is running does not have permission to read them,
(d) one or both of the files are corrupt.

我做了IBM文档中提到的所有事情，但我无法解决

SSLKEYR值为

/var/mqm/qmgrs/QMGRname/ssl/key

-rwxrwxr-x. 1 mqm mqm  80 Apr 21 14:31 key.rdb
-rwxrwxr-x. 1 mqm mqm 193 Apr 21 14:32 key.sth
-rwxrwxr-x. 1 mqm mqm 15K Apr 21 14:44 key.kdb

---

Unix区分大小写，

/VAR/MQM/QMGRS/AZMQGW02/SSL/KEY

与

/VAR/MQM/QMGRS/AZMQGW02/SSL/KEY

不同

要解决此问题，请运行以下命令：

printf "ALTER QMGR SSLKEYR('/var/mqm/qmgrs/AZMQGW02/ssl/key')\nREFRESH SECURITY TYPE(SSL)\n" | runmqsc  AZMQGW02

---

请注意，对于MQSC命令，如果不使用单引号将字符串括起来，它将被折叠为大写。

您是否尝试使用runmqakm通过stashed选项访问kdb

runmqakm-cert-list-db key.kdb-stashed

应列出kdb中的证书。请告诉我们您在哪个平台上遇到此问题，并显示目录列表和SSLKEYRvalue@morag我们使用的是Linux平台，SSLKEYR值为/var/mqm/qmgrs/QMGRname/ssl/key@JoshMc我使用了runmqckm-cert-list-db key.kdb-pw密码在KDB中列出证书的命令您提供的命令不是我建议的命令。使用

-stashed

而不是

-pw

将使用

键.sth

文件并帮助证明其有效性。还请提供您正在运行的IBM MQ的特定版本。

$ runmqakm -cert -list -db /var/mqm/qmgrs/qmgr/ssl/key.kdb -stashed
Certificates found
* default, - personal, ! trusted, # secret key
!       "mns non-prod root ca"
!       "mns plc sub ca cate"
-       ibmwebspheremqqmgr

     1 : DIS QMGR SSLKEYR CERTLABL
AMQ8408I: Display Queue Manager details.
   QMNAME(qmgr)                        CERTLABL(ibmwebspheremqqmgr)
   SSLKEYR(/VAR/MQM/QMGRS/qmgr/SSL/KEY)

     1 : DIS QMGR SSLKEYR CERTLABL
AMQ8408I: Display Queue Manager details.
   QMNAME(qmgr)                        CERTLABL(ibmwebspheremqqmgr)
   SSLKEYR(/var/mqm/qmgrs/qmgr/ssl/key)

-rwxrwxr-x. 1 mqm mqm 15088 Apr 28 17:18 /var/mqm/qmgrs/AZMQGW02/ssl/key.kdb
-rwxrwxr-x. 1 mqm mqm    80 Apr 28 17:18 /var/mqm/qmgrs/AZMQGW02/ssl/key.rdb
-rwxrwxr-x. 1 mqm mqm   193 Apr 28 17:19 /var/mqm/qmgrs/AZMQGW02/ssl/key.sth

(mq:9.2.0.0)root@22955896bc26:/var/mqm/qmgrs/AZMQGW02/ssl# su - mqm
No directory, logging in with HOME=/
$ getfacl /var/mqm/qmgrs/AZMQGW02/ssl/key.*
-su: 1: getfacl: not found

printf "ALTER QMGR SSLKEYR('/var/mqm/qmgrs/AZMQGW02/ssl/key')\nREFRESH SECURITY TYPE(SSL)\n" | runmqsc  AZMQGW02