Search code examples
sslibm-mq

RFHutilc disable OCSP check

In RFHUtil client, do we disable OCSP check and how? as getting below error

Intially getting "Remote SSL certificate revocation status check failed for channel" Then after adding Entry in mqclient.ini file

SSL:
  OCSPAuthentication=OPTIONAL
  OCSPCheckExtensions=NO
  CDPCheckExtensions=NO

After adding this entry , getting error as the channel did not supply any certificate

Solution

  • Certlabel entry is mandatory for rfhutilc to connect to queue manager which uses certificates.

    SSL:
     AllowTLSV13=TRUE
     OCSPCheckExtensions=NO 
     CDPCheckExtensions=NO
     OCSPAuthentication=OPTIONAL
     CertificateLabel=myclientcertname