commit d3a51dc2b4a7395d2d3a28ece40e0bce910bd525 Author: Rasmus Lauritsen Date: Mon Mar 24 22:39:15 2025 +0100 first commit diff --git a/readme.md b/readme.md new file mode 100644 index 0000000..d9b9bd2 --- /dev/null +++ b/readme.md @@ -0,0 +1,34 @@ +# Start queue managers +```bash +docker run --name qm1 --env LICENSE=accept --env MQ_QMGR_NAME=QM1 --publish 1414:1414 --publish 9443:9443 --volume ./certs:/certs --detach icr.io/ibm-messaging/mq:latest +docker run --name qm2 --env LICENSE=accept --env MQ_QMGR_NAME=QM2 --publish 1415:1414 --publish 9444:9443 --volume ./certs:/certs --detach icr.io/ibm-messaging/mq:latest +``` + +# Login to a container +```bash +docker exec -it qm1 /bin/bash +``` + +# Creates a PKCS #12 key repository file +```bash +runmqakm -keydb -create -db qm1.p12 -pw password -type pkcs12 +runmqakm -keydb -create -db qm2.p12 -pw password -type pkcs12 +``` + +# create a self-signed personal certificate +```bash +runmqakm -cert -create -db qm1.p12 -pw password -label qm1 -dn "CN=qm1dn" -size 512 -x509version 3 -expire 365 -fips -sig_alg SHA1WithRSA +runmqakm -cert -create -db qm2.p12 -pw password -label qm2 -dn "CN=qm2dn" -size 512 -x509version 3 -expire 365 -fips -sig_alg SHA1WithRSA +``` + +# Extracting the public part of a self-signed certificate from a key repository +```bash +runmqakm -cert -extract -db qm1.p12 -pw password -label qm1 -target qm1pub.crt -format ascii -fips +runmqakm -cert -extract -db qm2.p12 -pw password -label qm2 -target qm2pub.crt -format ascii -fips +``` + +# Adding a CA certificate, or the public part of a trusted certificate, into a key repository +```bash +runmqakm -cert -add -db qm1.p12 -pw password -label qm2 -file qm2pub.crt -format ascii -fips +runmqakm -cert -add -db qm2.p12 -pw password -label qm1 -file qm1pub.crt -format ascii -fips +``` \ No newline at end of file