[Quickfixj-users] SSL Setup

[Paresh D. <par...@gm...>]

Hi All,



QuickFixJ docs are a bit sketchy around the SSL area.



I am trying to setup SSL between 2 engines (1 quickfixj and
other is a proprietary NYSE engine).



What is the desired way of going about doing this:



1.
Both generate certificates using OpenSSL and convert to
PKCS12 format.

2.
Swap pkcs12 files.

3.
Import client's pkcs12 file into a new keystore.

4.
Reference keystore and password in quickfixJ config.

5.
Client would do the same.



Is this the correct way?



Can I achieve this using just one certificate, i.e. I generate
a PKCS12 cert, send it to the client, and include the same one in my keystore?



Thanks in advance.