IBM Support

In MQ v 8.0.0.6 and higher and MQ v 9.0.0.1 and higher the internal format of GSKit keystore stash files has changed.

Troubleshooting


Problem

A keystore stash file stores the password of a keystore in obfuscated form.  The internal format of GSKit stash file has changed.

All newly generated stash files will be created using the new format in MQ v 8.0.0.6 and higher and MQ v 9.0.0.1 and higher; due to the newer GSKit version included with MQ.

This change in GSKit v8.0.50.69 and higher. 

Keystore stash files generated with later version of MQ/GSKit, can not be read with the older version of MQ/GSKit.  The following error will result:

AMQ9660: SSL key repository: password stash file absent or unusable.

Diagnosing The Problem

To find out which version of GSKit you are using, please see the following: 
You can also use the 'dspmqver -a' command to see the version of GSKit installed with MQ.

Resolving The Problem

Ensure your keystore stash file is created with a version of MQ/GSKit which is compatible with your installation.  The new format is recommended because it uses the stronger stash file protection.
This information is also shown in the following readme:
Readme for IBM MQ V8.0 and its maintenance at:

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
21 February 2020

UID

ibm13248997