{{Quickfixn}} Secure Initiator to Bloomberg

[Steve Smith]

Ok, we have gotten it working. We had an exception until we added SSLValidateCertificates and SSLCheckCertificateRevocation to the settings. We are now running the following:


SSLEnable=Y
SSLProtocols=Tls12
SSLValidateCertificates=N
SSLCheckCertificateRevocation=N
SSLCertificate=c:\Keys\Cert.pfx
SSLCertificatePassword=xxxxxxx



________________________________
From: Quickfixn <quickfixn-bounces at lists.quickfixn.com> on behalf of William Taniguchi <william.taniguchi at verdeasset.com.br>
Sent: Wednesday, June 21, 2017 11:03 AM
To: Mailing list for QuickFIX/n
Subject: Re: {{Quickfixn}} Secure Initiator to Bloomberg


Sure: get the PFX file copied to the machine you are running your app, double click it. Follow the wizard, use the password you get in the pkcs12 folder. Default selections should be ok.

Make sure the certificate is available to the user running your app.



If you don’t have desktop access to the machine, you could also use CERTUTIL to do the importing.



From: Quickfixn [mailto:quickfixn-bounces at lists.quickfixn.com] On Behalf Of Steve Smith
Sent: Wednesday, June 21, 2017 14:55
To: Mailing list for QuickFIX/n <quickfixn at lists.quickfixn.com>
Subject: Re: {{Quickfixn}} Secure Initiator to Bloomberg



Thanks for that. Can you elaborate a bit on installing the PFX on the server? We have been provided with pfx, pem, jks and kdb files and passwords.



________________________________

From: Quickfixn <quickfixn-bounces at lists.quickfixn.com<mailto:quickfixn-bounces at lists.quickfixn.com>> on behalf of William Taniguchi <william.taniguchi at verdeasset.com.br<mailto:william.taniguchi at verdeasset.com.br>>
Sent: Wednesday, June 21, 2017 9:42 AM
To: Mailing list for QuickFIX/n
Subject: Re: {{Quickfixn}} Secure Initiator to Bloomberg



If you mean the new(ish) TLS mandatory connection, you need only to install the PFX on your server and set SSLEnable, SSLCertificate, SSLCertificatePassword and SSLProtocols=Tls12.



From: Quickfixn [mailto:quickfixn-bounces at lists.quickfixn.com] On Behalf Of Steve Smith
Sent: Wednesday, June 21, 2017 13:20
To: quickfixn at lists.quickfixn.com<mailto:quickfixn at lists.quickfixn.com>
Subject: {{Quickfixn}} Secure Initiator to Bloomberg



Has anyone successfully connected an initiator to BBG using a secure connection? If so, can you describe how you were able to get it done, including config examples, either using QF / N or stunnel? Did you have to register any certificates with Windows?   Many thanks

Esta mensagem é para o uso exclusivo de seu destinatário e pode conter informações confidenciais, proprietárias ou privilegiadas. Se você recebeu esta mensagem por engano, por favor, notifique imediatamente o remetente e apague este conteúdo. A Verde se reserva o direito de interceptar e monitorar todas as comunicações de e-mail por meio de suas redes, quando legalmente permitido. Para demais avisos importantes sobre essa mensagem, acesse: Verde Asset Management S.A. Disclaimer <http://www.verdeasset.com.br/disclaimer/>

===============================================================================

This message is for the named person's use only and may contain confidential, proprietary or privileged information. If you have received this message in error, please immediately notify the sender and delete this content. Verde reserves the right to intercept and monitor all e-mail communications through its networks if legally allowed. Please access the attached hyperlink for further important electronic communication disclaimer: Verde Asset Management S.A. Disclaimer <http://www.verdeasset.com.br/en/disclaimer/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.quickfixn.com/pipermail/quickfixn-quickfixn.com/attachments/20170621/b14e29d0/attachment-0001.htm>