<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Arial Narrow";
panose-1:2 11 6 6 2 2 2 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Arial Narrow",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Verdana",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Verdana",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Arial Narrow",sans-serif;
color:#1F497D;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif;color:#1F497D">Thank you Jose. We got it working with your suggestion.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">Ravi Arcot<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF">***********************************************************************************<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF">The information in this e-mail message may be privileged, confidential, and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly
prohibited. If you think that you have received this e-mail message in error, please e-mail the sender and delete all copies. Thank you.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF">***********************************************************************************</span><span style="font-size:8.0pt;color:#BFBFBF"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Quickfixn [mailto:quickfixn-bounces@lists.quickfixn.com]
<b>On Behalf Of </b>José Antônio Fonseca<br>
<b>Sent:</b> Tuesday, August 06, 2019 5:43 AM<br>
<b>To:</b> 'Mailing list for QuickFIX/n' <quickfixn@lists.quickfixn.com><br>
<b>Subject:</b> Re: {{Quickfixn}} Tls1.2 connection to bloomberg does not send a logon<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="PT-BR">Hi there, <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT-BR"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-indent:35.4pt">Try not validating the certificates.
<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:35.4pt"><o:p> </o:p></p>
<p class="MsoNormal" style="text-indent:35.4pt">And use pfx files for the certificate.<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:35.4pt"><o:p> </o:p></p>
<p class="MsoNormal" style="text-indent:35.4pt"><span lang="PT-BR" style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLValidateCertificates=N<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT-BR" style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="PT-BR" style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">Regards,
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT-BR" style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="PT-BR" style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">José Fonseca</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="PT-BR"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Quickfixn <<a href="mailto:quickfixn-bounces@lists.quickfixn.com">quickfixn-bounces@lists.quickfixn.com</a>>
<b>On Behalf Of </b>Matthias Güntert<br>
<b>Sent:</b> terça-feira, 6 de agosto de 2019 03:39<br>
<b>To:</b> Mailing list for QuickFIX/n <<a href="mailto:quickfixn@lists.quickfixn.com">quickfixn@lists.quickfixn.com</a>><br>
<b>Subject:</b> Re: {{Quickfixn}} Tls1.2 connection to bloomberg does not send a logon<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Try the following in your class that implements IApplication…</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:black">
</span><span style="font-size:9.5pt;font-family:Consolas;color:blue">public</span><span style="font-size:9.5pt;font-family:Consolas;color:black">
</span><span style="font-size:9.5pt;font-family:Consolas;color:blue">void</span><span style="font-size:9.5pt;font-family:Consolas;color:black"> ToAdmin(Message message, SessionID sessionId)</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:black"> {</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:black">
</span><span style="font-size:9.5pt;font-family:Consolas;color:blue">if</span><span style="font-size:9.5pt;font-family:Consolas;color:black"> (message.Header.GetField(35) == MsgType.LOGON)</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:black"> {</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:black"> message.Header.SetField(</span><span style="font-size:9.5pt;font-family:Consolas;color:#A31515">"Username"</span><span style="font-size:9.5pt;font-family:Consolas;color:black">);</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:black"> message.Header.SetField(</span><span style="font-size:9.5pt;font-family:Consolas;color:#A31515">"Password"</span><span style="font-size:9.5pt;font-family:Consolas;color:black">);</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:black">
</span><span lang="DE-CH" style="font-size:9.5pt;font-family:Consolas;color:black">}</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-CH" style="font-size:9.5pt;font-family:Consolas;color:black"> }</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-CH" style="font-size:9.5pt;font-family:Consolas;color:black"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-CH" style="font-size:9.5pt;font-family:Consolas;color:black">Best, Matthias</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-CH" style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="DE">Von:</span></b><span lang="DE"> Quickfixn [<a href="mailto:quickfixn-bounces@lists.quickfixn.com">mailto:quickfixn-bounces@lists.quickfixn.com</a>]
<b>Im Auftrag von </b>Ravi Arcot<br>
<b>Gesendet:</b> Montag, 5. August 2019 22:53<br>
<b>An:</b> <a href="mailto:quickfixn@lists.quickfixn.com">quickfixn@lists.quickfixn.com</a><br>
<b>Betreff:</b> {{Quickfixn}} Tls1.2 connection to bloomberg does not send a logon</span><span lang="DE-CH"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="DE-CH"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">We are using QuickFix/n Version 1.7 and attempting to connect to Bloomberg with their Tls certificate. We are the initiator and Bloomberg is the acceptor. The engine creates
the session and does not logon. Bloomberg network engineers say they see the Tls handshake and acknowledgement but no logon attempt. We attempted the following configuration(s) in the initiator.cfg.</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">[SESSION]</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">..</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">..</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLEnable=Y</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLProtocols=Tls12</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLValidateCertificates=Y
</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLCheckCertificateRevocation=N
</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLCertificate=C:/KynApps/KynexFixService/certs/cert.pfx</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLCertificatePassword=xxxxxxx</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">We also tried</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">[SESSION]</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">..</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">..</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLEnable=Y</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLProtocols=Tls12</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLValidateCertificates=Y
</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLCheckCertificateRevocation=N
</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLCertificate=C:/KynApps/KynexFixService/certs/cert.pem</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLCertificatePassword=xxxxxxxxxxxxx</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLCACertificate=C:/KynApps/KynexFixService/certs/CACerts.pem</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">SSLRequireClientCertificate=Y</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">If we remove the SSL configs in the quickfix config file and create a stunnel with the pem certificates, it establishes the session fine. We prefer to go direct from engine
without stunnel.</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">Appreciate any suggestions on what might be going on if others have gone down this path and found a resolution.</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">Thank you in advance.</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif">Best</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial Narrow",sans-serif"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal">Ravi Arcot<span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal">201.796.4900<span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><a href="mailto:ravi@kynex.com">ravi@kynex.com</a><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF">***********************************************************************************</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF">The information in this e-mail message may be privileged, confidential, and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly
prohibited. If you think that you have received this e-mail message in error, please e-mail the sender and delete all copies. Thank you.</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF"> </span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#BFBFBF">***********************************************************************************</span><span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="DE-CH"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-CH"><br>
*****************************************************<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="line-height:11.9pt"><span lang="DE-CH">This e-mail may contain confidential material. It is intended only for the person or entity which it is addressed to. In case you should not be supposed to get this e-mail we ask you to delete
it without taking notice of its content. Any views or opinions expressed in this e-mail are those of the sender and do not necessarily coincide with those of The Swiss Raiffeisen Group. Therefore this e-mail does not represent a binding agreement nor an offer
to deal. E-Mail transmission can be insecure and can contain errors. Information could be intercepted, corrupted, lost, destroyed, incomplete or may contain viruses. Neither The Swiss Raiffeisen Group nor the sender can accept any liability for any kind of
damage as the result of viruses or transmission errors.<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="line-height:11.9pt"><span lang="DE-CH">*****************************************************<o:p></o:p></span></p>
</div>
</div>
</div>
</body>
</html>