views:

443

answers:

2

IBM MQ uses some strange to me certificate format with kdb extension.

How can I open it and change its validity date?

+1  A: 

You can use IBM Key Management tool (aka Ikeyman) for this purpose. Yous should get it with MQ installation. Just review Working with WebSphere MQ TLS and SSL support Section of Websphere MQ documentation.

Matej
+1  A: 

The IBM Key Management tool can be from the command line with strmqikm

This will allow you to view and modify the key database.

I do not believe you will be able to modify the validity date of a certificate inside the kdb container. You can import and export certificates with the tool though.

Mr Jacques