<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>Ok, we have gotten it working. We had an exception until we added <span>SSLValidateCertificates</span> and <span>SSLCheckCertificateRevocation to the settings. We are now running the following:</span></p>
<p><br>
</p>
<p></p>
<div>SSLEnable=Y</div>
<div><span>SSLProtocols=Tls12</span><br>
SSLValidateCertificates=N<br>
SSLCheckCertificateRevocation=N<br>
SSLCertificate=c:\Keys\Cert.pfx<br>
SSLCertificatePassword=xxxxxxx</div>
<br>
<p></p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font color="#000000" face="Calibri, sans-serif" style="font-size:11pt"><b>From:</b> Quickfixn <quickfixn-bounces@lists.quickfixn.com> on behalf of William Taniguchi <william.taniguchi@verdeasset.com.br><br>
<b>Sent:</b> Wednesday, June 21, 2017 11:03 AM<br>
<b>To:</b> Mailing list for QuickFIX/n<br>
<b>Subject:</b> Re: {{Quickfixn}} Secure Initiator to Bloomberg</font>
<div> </div>
</div>
<div>
<div>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<span lang="EN-US" style="font-size:10.0pt; font-family:"Lucida Sans Unicode",sans-serif">Sure: get the PFX file copied to the machine you are running your app, double click it. Follow the wizard, use the password you get in the pkcs12 folder. Default selections
should be ok.</span></p>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<span lang="EN-US" style="font-size:10.0pt; font-family:"Lucida Sans Unicode",sans-serif">Make sure the certificate is available to the user running your app.</span></p>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<span lang="EN-US" style="font-size:10.0pt; font-family:"Lucida Sans Unicode",sans-serif"> </span></p>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<span lang="EN-US" style="font-size:10.0pt; font-family:"Lucida Sans Unicode",sans-serif">If you don’t have desktop access to the machine, you could also use CERTUTIL to do the importing.</span></p>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<span lang="EN-US" style="font-size:10.0pt; font-family:"Lucida Sans Unicode",sans-serif"> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<b><span lang="EN-US" style="font-size:11.0pt; font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt; font-family:"Calibri",sans-serif"> Quickfixn [mailto:quickfixn-bounces@lists.quickfixn.com]
<b>On Behalf Of </b>Steve Smith<br>
<b>Sent:</b> Wednesday, June 21, 2017 14:55<br>
<b>To:</b> Mailing list for QuickFIX/n <quickfixn@lists.quickfixn.com><br>
<b>Subject:</b> Re: {{Quickfixn}} Secure Initiator to Bloomberg</span></p>
</div>
</div>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
</p>
<div id="divtagdefaultwrapper">
<p><span style="font-family:"Calibri",sans-serif; color:black">Thanks for that. Can you elaborate a bit on installing the PFX on the server? We have been provided with pfx, pem, jks and kdb files and passwords. </span></p>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
<div>
<div align="center" style="margin: 0in 0in 0pt; text-align: center; font-family: "Times New Roman",serif; font-size: 12pt;">
<span style="font-family:"Calibri",sans-serif; color:black">
<hr width="98%" size="2" align="center">
</span></div>
<div id="divRplyFwdMsg">
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:black">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:black"> Quickfixn <<a style="color: blue; text-decoration: underline;" href="mailto:quickfixn-bounces@lists.quickfixn.com">quickfixn-bounces@lists.quickfixn.com</a>>
on behalf of William Taniguchi <<a style="color: blue; text-decoration: underline;" href="mailto:william.taniguchi@verdeasset.com.br">william.taniguchi@verdeasset.com.br</a>><br>
<b>Sent:</b> Wednesday, June 21, 2017 9:42 AM<br>
<b>To:</b> Mailing list for QuickFIX/n<br>
<b>Subject:</b> Re: {{Quickfixn}} Secure Initiator to Bloomberg</span><span style="font-family:"Calibri",sans-serif; color:black">
</span></p>
<div>
<p style="margin: 0in 0in 0pt; font-family: "Times New Roman",serif; font-size: 12pt;">
<span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
</div>
<div>
<div>
<p><span lang="EN-US" style="font-size:10.0pt; font-family:"Lucida Sans Unicode",sans-serif; color:black">If you mean the new(ish) TLS mandatory connection, you need only to install the PFX on your server and set SSLEnable, SSLCertificate, SSLCertificatePassword
and SSLProtocols=Tls12.</span><span style="color:black"></span></p>
<p><span lang="EN-US" style="font-size:10.0pt; font-family:"Lucida Sans Unicode",sans-serif; color:black"> </span><span style="color:black"></span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p><b><span lang="EN-US" style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:black">From:</span></b><span lang="EN-US" style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:black"> Quickfixn [<a style="color: blue; text-decoration: underline;" href="mailto:quickfixn-bounces@lists.quickfixn.com">mailto:quickfixn-bounces@lists.quickfixn.com</a>]
<b>On Behalf Of </b>Steve Smith<br>
<b>Sent:</b> Wednesday, June 21, 2017 13:20<br>
<b>To:</b> <a style="color: blue; text-decoration: underline;" href="mailto:quickfixn@lists.quickfixn.com">
quickfixn@lists.quickfixn.com</a><br>
<b>Subject:</b> {{Quickfixn}} Secure Initiator to Bloomberg</span><span style="color:black"></span></p>
</div>
</div>
<p><span style="color:black"> </span></p>
<div id="divtagdefaultwrapper">
<p><span style="font-family:"Calibri",sans-serif; color:black">Has anyone successfully connected an initiator to BBG using a secure connection? If so, can you describe how you were able to get it done, including config examples, either using QF / N or stunnel?
Did you have to register any certificates with Windows? Many thanks</span></p>
</div>
</div>
<p style="line-height:10.0pt"><span style="font-size:8.0pt; font-family:"Cambria",serif; color:black">Esta mensagem é para o uso exclusivo de seu destinatário e pode conter informações confidenciais, proprietárias ou privilegiadas. Se você recebeu esta mensagem
por engano, por favor, notifique imediatamente o remetente e apague este conteúdo. A Verde se reserva o direito de interceptar e monitorar todas as comunicações de e-mail por meio de suas redes, quando legalmente permitido. Para demais avisos importantes sobre
essa mensagem, acesse: </span><b><span style="font-size:9.0pt; font-family:"Calibri",sans-serif; color:#CC0000"><a style="color: blue; text-decoration: underline;" href="http://www.verdeasset.com.br/disclaimer/"><span style="color:#81B8D6">Verde Asset Management
S.A. Disclaimer </span></a></span></b><span style="font-size:8.0pt; font-family:"Cambria",serif; color:black"></span></p>
<p style="line-height:10.0pt"><span style="font-size:8.0pt; font-family:"Cambria",serif; color:black">===============================================================================</span></p>
<p style="line-height:10.0pt"><span style="font-size:8.0pt; font-family:"Cambria",serif; color:black">This message is for the named person's use only and may contain confidential, proprietary or privileged information. If you have received this message in error,
please immediately notify the sender and delete this content. Verde reserves the right to intercept and monitor all e-mail communications through its networks if legally allowed. Please access the attached hyperlink for further important electronic communication
disclaimer: </span><b><span style="font-size:9.0pt; font-family:"Calibri",sans-serif; color:#CC0000"><a style="color: blue; text-decoration: underline;" href="http://www.verdeasset.com.br/en/disclaimer/"><span style="color:#81B8D6">Verde Asset Management S.A.
Disclaimer </span></a></span></b><span style="font-size:8.0pt; font-family:"Cambria",serif; color:black"></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>