{{Quickfixn}} Ssl Help

Tue Jun 30 02:08:14 PDT 2020

Hello,

Please use .NET System.Net tracing to see TLS connections handshake in-depth errors.
Example here (applies to any TLS connections), including via Quick FIX N:
https://techcommunity.microsoft.com/t5/iis-support-blog/troubleshooting-tls-ssl-communication-problems-when-making-http/ba-p/481441

Christophe

De : Quickfixn <quickfixn-bounces at lists.quickfixn.com> De la part de sagar kohli
Envoyé : Tuesday, June 30, 2020 10:53 AM
À : dominique.normand at gmail.com; Mailing list for QuickFIX/n <quickfixn at lists.quickfixn.com>
Objet : Re: {{Quickfixn}} Ssl Help

Yes you are right I am using password provided for .pfx file(certificate) But not able to trace exact error can someone help?

Sagar

On Tue, Jun 30, 2020, 2:06 PM Dominique Normand <dominique.normand at gmail.com<mailto:dominique.normand at gmail.com>> wrote:
Hi there,

If I remember correctly, SSLCertificatePassword=… is the password for the PFX file and has nothing to do with the certificate itself.

Regards
Dominique Normand

From: Quickfixn [mailto:quickfixn-bounces at lists.quickfixn.com<mailto:quickfixn-bounces at lists.quickfixn.com>] On Behalf Of sagar kohli
Sent: June 30, 2020 1:19 AM
To: Mailing list for QuickFIX/n <quickfixn at lists.quickfixn.com<mailto:quickfixn at lists.quickfixn.com>>
Subject: Re: {{Quickfixn}} Ssl Help

Any suggestions.

Regards
Sagar Kohli
On Tue, Jun 30, 2020, 1:46 AM sagar kohli <sagar.kkohli at gmail.com<mailto:sagar.kkohli at gmail.com>> wrote:
Hi,

Sure, but can someone share a sample that what all properties we need to set in configuration for sending ssl request.  Or way to debug or enable additional logging in quick fix to trace the cause.

Regards
Sagar Kohli

On Tue, Jun 30, 2020, 1:00 AM Grant Birchmeier <gbirchmeier at connamara.com<mailto:gbirchmeier at connamara.com>> wrote:
Please upgrade to 1.10.0.    There have been some SSL fixes and corrections since 1.8.

On Mon, Jun 29, 2020 at 2:17 PM sagar kohli <sagar.kkohli at gmail.com<mailto:sagar.kkohli at gmail.com>> wrote:
No currently using 1.8.0

Regards
Sagar Kohli

On Tue, Jun 30, 2020, 12:10 AM Grant Birchmeier <gbirchmeier at connamara.com<mailto:gbirchmeier at connamara.com>> wrote:
Are you using the latest version 1.10.0?

If you are using NuGet, make sure you are using packages listed at http://quickfixn.org/download/  (All other packages are unofficial and quite old)

On Mon, Jun 29, 2020 at 12:39 PM sagar kohli <sagar.kkohli at gmail.com<mailto:sagar.kkohli at gmail.com>> wrote:
Hi,

I am facing a issue in implementing ssl. I can see my application sending logon request without ssl.

But when I use ssl(have pfx file and password from ECN) in wireshark trace can see that initiator starts the connection but then there is no logon message sent.  In logs just see.

Created Session
Connecting to IP xxx.xxx.xxx.xxx and Port xxxx
Connecting to IP xxx.xxx.xxx.xxx and Port xxxx

Can someone please suggest, I am using below ssl settings.

SSLEnable=Y

SSLProtocols=Tls12

SSLValidateCertificates=N

SSLCheckCertificateRevocation=N

SSLCertificate=Pathname for the .pfx file

SSLCertificatePassword=Password provided by the entity generating the certificate

Regards

Sagar Kohli
_______________________________________________
Quickfixn mailing list
Quickfixn at lists.quickfixn.com<mailto:Quickfixn at lists.quickfixn.com>
http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com

--
Grant Birchmeier
Connamara Systems, LLC
Made-To-Measure Trading Solutions.
Exactly what you need. No more. No less.
http://connamara.com

This email, along with any attachments, is confidential. If you believe you received this message in error, please contact the sender immediately and delete all copies of the message. Thank you from Connamara Systems, LLC._______________________________________________
Quickfixn mailing list
Quickfixn at lists.quickfixn.com<mailto:Quickfixn at lists.quickfixn.com>
http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
_______________________________________________
Quickfixn mailing list
Quickfixn at lists.quickfixn.com<mailto:Quickfixn at lists.quickfixn.com>
http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com

--
Grant Birchmeier
Connamara Systems, LLC
Made-To-Measure Trading Solutions.
Exactly what you need. No more. No less.
http://connamara.com

This email, along with any attachments, is confidential. If you believe you received this message in error, please contact the sender immediately and delete all copies of the message. Thank you from Connamara Systems, LLC._______________________________________________
Quickfixn mailing list
Quickfixn at lists.quickfixn.com<mailto:Quickfixn at lists.quickfixn.com>
http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
_______________________________________________
Quickfixn mailing list
Quickfixn at lists.quickfixn.com<mailto:Quickfixn at lists.quickfixn.com>
http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
*************************************************************************
This message and any attachments (the “message”) are confidential, intended solely for the addressee(s), and may contain legally privileged information.
Any unauthorised use or dissemination is prohibited.
If you are not the intended recipient please notify us immediately by telephoning or e-mailing the sender.
You should not copy this e-mail or use it for any purpose nor disclose its contents to any other person.
E-mails are susceptible to alteration. Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified.
You agree to receive all communications by email or through dedicated websites.
Please visit https://wholesale.banking.societegenerale.com/en/market-reg/ for important information on MiFID, SFTR, IBOR transition and with respect to derivative products.

Ce message et toutes les pieces jointes sont confidentiels et susceptibles de contenir des informations couvertes par le secret professionnel.
Ce message est etabli a l’attention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisee est interdite.
Tout message electronique est susceptible d'alteration.
SOCIETE GENERALE et ses filiales declinent toute responsabilite en cas d’alteration, modification ou falsification de ce message.
Vous acceptez de recevoir nos communications par email ou via des sites web dedies.
Veuillez consulter le site https://wholesale.banking.societegenerale.com/en/market-reg/ pour des informations importantes sur MiFID, SFTR, la transition IBOR et sur les produits derives.
*************************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.quickfixn.com/pipermail/quickfixn-quickfixn.com/attachments/20200630/1c5c89f1/attachment.htm>