<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Arial Narrow";
panose-1:2 11 6 6 2 2 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Arial Narrow",sans-serif;
color:#1F497D;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">The following settings in the initiator.cfg worked for us.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">SSLEnable=Y<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">SSLProtocols=Tls12<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">SSLValidateCertificates=N<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">SSLCheckCertificateRevocation=N<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">SSLCertificate=Pathname for the .pfx file<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">SSLCertificatePassword=Password provided by the entity generating the certificate<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">We did have success with .pem file in stunnel config but prefer the initiator.cfg to do the job and keep the config in one place and avoid an additional moving part.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">We were not very successful with other parameter values in initiator config due to interference with windows OS. The most troubling is saying not to validate certificate
and we chose to live with it and avoid aggravation with windows settings.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D">Best<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Ravi Arcot<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#BFBFBF"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#BFBFBF">***********************************************************************************<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#BFBFBF">The information in this e-mail message may be privileged, confidential, and protected from disclosure. If you are not the intended recipient, any dissemination,
distribution or copying is strictly prohibited. If you think that you have received this e-mail message in error, please e-mail the sender and delete all copies. Thank you.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#BFBFBF"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#BFBFBF">***********************************************************************************</span><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#BFBFBF"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial Narrow",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Quickfixn [mailto:quickfixn-bounces@lists.quickfixn.com]
<b>On Behalf Of </b>Grant Birchmeier<br>
<b>Sent:</b> Wednesday, June 10, 2020 12:38 PM<br>
<b>To:</b> Mailing list for QuickFIX/n <quickfixn@lists.quickfixn.com><br>
<b>Subject:</b> Re: {{Quickfixn}} SSL help<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:black">Hope nobody's waiting for me to jump in. I am not well-versed in this SSL part.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">All I can do is point you at <a href="https://url.emailprotection.link/?bUSxmmm4yxkw1Vt9XwO70V5FmcjMQc7DoQ4IjA1QRrCZSXby0jt57A6RHFDFj-HX8C3vFjLJoBUFpCcW4I2gn6_X9PUZ8UvlaKLhbsE6YOjIf8X7D497_O1qkW9a3fTwD">http://quickfixn.org/tutorial/configuration.html#ssl</a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">If that doesn't work, might be quicker to configure a Stunnel instance if you can't get an answer here.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">(Also, Sagar, please write new subject lines for new questions.)<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">-Grant<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Jun 10, 2020 at 11:23 AM sagar kohli <<a href="mailto:sagar.kkohli@gmail.com">sagar.kkohli@gmail.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal">Hi Team, <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Any help would be appreciated. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks & Regards<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Sagar<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Jun 10, 2020, 7:13 PM sagar kohli <<a href="mailto:sagar.kkohli@gmail.com" target="_blank">sagar.kkohli@gmail.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal">Hi, <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I have created a initiator, and now need to implement ssl for making communication secure. We are basically interacting with ecn and they have shared certificates with ext jks, pem and pkcs12. Require help to implement it. And do we need
to install cert or can we directly specify location of cert. Also know we can set the values of below ssl parameters in configuration<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">SslEnable<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">SslValidateCertificate<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">SslProtocols<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">SslCertificate<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">SslCertificatePassword<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I have used pkcs12 cert and specified the values of above parameter but in logs see repeated line<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Connecting to IP(client ip) on port no<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Need help<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Sagar Kohli<o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;background:white">Grant Birchmeier</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#3333FF;background:#FFCC00">Connamara Systems, LLC</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt">Made-To-Measure Trading Solutions.</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Exactly what you need. No more. No less.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><a href="https://url.emailprotection.link/?buygN6sbmbftv9v4SWTdoMIwcX4BofB-RlbYpJqLvqJc--QJr4IftPtRv0wronsfWeYIlI80GyaqLnLdYu24sgg~~" target="_blank">http://connamara.com</a></span><o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1D1C1D;background:white">This email, along with any attachments, is confidential. If you believe you received this message in error, please contact the sender immediately and delete all copies
of the message. Thank you from Connamara Systems, LLC.</span><o:p></o:p></p>
</div>
</body>
</html>