IBM Editor for Messages for Distributed Systems, Version 2.0.0, Fixpack 4

(C) Copyright International Business Machines(R), 2007. All rights reserved.

Date: October 1, 2007

Patch: 2.0.0-TIV-EDITORMSGS-IF0004



CONTENTS
---------
1.0 ABOUT THIS FIX PACK
  1.1 Supported operating systems
  1.2 Dependencies
  1.3 Database changes and special considerations
  1.4 Patches superceded by this patch
  1.5 Fix Pack Contents
  1.6 Files Replaced or Added by this Patch
    1.6.1 All UNIX platforms
    1.6.2 AIX
    1.6.3 HP
    1.6.4 Solaris
    1.6.5 Windows
2.0 PROBLEMS FIXED
3.0 APPLYING THE FIX PACK
  3.1 AIX
  3.2 HP
  3.3 Solaris
  3.4 Windows
4.0 ADDITIONAL INSTRUCTIONS FOR SSL CLIENT CONNECTIONS
  4.1 Converting a Key Store to a JKS format
    4.1.1 UNIX
    4.1.2 Windows
  4.2 Generating a Stash File for the JKS Password
    4.2.1 UNIX
    4.2.2 Windows
5.0 UNINSTALLING THE FIX PACK



1.0 ABOUT THIS FIX PACK
-----------------------

This interim fix contains cumulative fixes since GA. It supercedes any previous patches.
It also contains some usability features requested by customers.

  1.1 Supported operating systems

    AIX 4.3.3 and higher
    HP-UX 11 and higher
    Solaris 2.7 and higher
    Windows NT 4.0
    Windows 2000
    Windows XP


  1.2 Dependencies

    This fix pack has no dependencies.


  1.3 Database changes and special considerations

    This fix pack has no database changes or special considerations.


  1.4 Patches superceded by this patch

	2.0.0-TIV-EDITORMSGS-IF0003
	2.0.0-TIV-EDITORMSGS-IF0002
	2.0.0-TIV-EDITORMSGS-IF0001
	XYAX1003
	XYHX1003
	XYSL1003
	XYWS1003


  1.5 Fix Pack Contents

    This fix pack contains the following files:

    2.0.0-TIV-EDITORMSGS-IF0004.README
    xyax1007.tar.Z	(AIX Driver) 
    xyhx1007.tar.Z	(HP Driver) 
    xysl1007.tar.Z	(Solaris Driver) 
    xyws1007.exe	(Windows Driver) 


  1.6 Files Replaced or Added by this Patch

    1.6.1 All UNIX platforms

	unix/MsgEdit/cfg/kxyJKS.sh
	unix/MsgEdit/html/index.htm
	unix/MsgEdit/html/kxyAdPro.htm
	unix/MsgEdit/html/kxyalert.htm
	unix/MsgEdit/html/kxyappfi.htm
	unix/MsgEdit/html/kxyCLgPr.htm
	unix/MsgEdit/html/kxyClLog.htm
	unix/MsgEdit/html/kxyClPro.htm
	unix/MsgEdit/html/kxyColFi.htm
	unix/MsgEdit/html/kxycomit.htm
	unix/MsgEdit/html/kxyconf.htm
	unix/MsgEdit/html/kxyConst.js
	unix/MsgEdit/html/kxyCrJMS.htm
	unix/MsgEdit/html/kxyCrQJM.htm
	unix/MsgEdit/html/kxycrtQ.htm
	unix/MsgEdit/html/kxyCrtWn.js
	unix/MsgEdit/html/kxyCrXML.htm
	unix/MsgEdit/html/kxydebug.htm
	unix/MsgEdit/html/kxyDelFi.htm
	unix/MsgEdit/html/kxydelMW.htm
	unix/MsgEdit/html/kxydelW.htm
	unix/MsgEdit/html/kxyDisQu.htm
	unix/MsgEdit/html/kxyEdJMS.htm
	unix/MsgEdit/html/kxyEdtWn.js
	unix/MsgEdit/html/kxyEdXML.htm
	unix/MsgEdit/html/kxyErrLi.js
	unix/MsgEdit/html/kxyErrTa.js
	unix/MsgEdit/html/kxyErrTr.js
	unix/MsgEdit/html/kxyFilt.htm
	unix/MsgEdit/html/kxyFind.htm
	unix/MsgEdit/html/kxyFoDLQ.htm
	unix/MsgEdit/html/kxyForWn.htm
	unix/MsgEdit/html/kxyGetFi.htm
	unix/MsgEdit/html/kxyGetVa.htm
	unix/MsgEdit/html/kxyHexCr.htm
	unix/MsgEdit/html/kxyhexed.class
	unix/MsgEdit/html/kxyhexed$myTextField.class
	unix/MsgEdit/html/kxyhexed$myTextField$myDocument.class
	unix/MsgEdit/html/kxylCol.htm
	unix/MsgEdit/html/kxyList.js
	unix/MsgEdit/html/kxyLoadW.htm
	unix/MsgEdit/html/kxylogH.htm
	unix/MsgEdit/html/kxymainH.htm
	unix/MsgEdit/html/kxymainW.htm
	unix/MsgEdit/html/kxymenus.js
	unix/MsgEdit/html/kxyMgr.js
	unix/MsgEdit/html/kxyModal.js
	unix/MsgEdit/html/kxymsged.htm
	unix/MsgEdit/html/kxynewCl.htm
	unix/MsgEdit/html/kxyNodes.htm
	unix/MsgEdit/html/kxynwJMS.htm
	unix/MsgEdit/html/kxyopnQ.htm
	unix/MsgEdit/html/kxyopt.htm
	unix/MsgEdit/html/kxyoQJMS.htm
	unix/MsgEdit/html/kxyQMsgW.htm
	unix/MsgEdit/html/kxyRepl.htm
	unix/MsgEdit/html/kxyRePro.htm
	unix/MsgEdit/html/kxyServr.js
	unix/MsgEdit/html/kxyStAtt.htm
	unix/MsgEdit/html/kxyStFmt.htm
	unix/MsgEdit/html/kxystsh.css
	unix/MsgEdit/html/kxySvFil.htm
	unix/MsgEdit/html/kxySvVar.htm
	unix/MsgEdit/html/kxyTable.js
	unix/MsgEdit/html/kxyTree.js
	unix/MsgEdit/html/kxyULoWn.htm
	unix/MsgEdit/html/kxyupdC.htm
	unix/MsgEdit/html/kxyupJMS.htm
	unix/MsgEdit/html/kxyVarDe.htm
	unix/MsgEdit/html/kxyXML.js
	unix/MsgEdit/html/kxyXMLTr.htm
	unix/MsgEdit/html/images/securityExit.gif
	unix/MsgEdit/html/images/securityExit_onclick.gif
	unix/MsgEdit/html/images/threedots.gif
	unix/MsgEdit/html/images/threedots_onclick.gif
	unix/MsgEdit/html/WebHelp/add_client_connection.htm
	unix/MsgEdit/html/WebHelp/cshdat_robohelp.htm
	unix/MsgEdit/html/WebHelp/edit_connection_properties.htm
	unix/MsgEdit/html/WebHelp/find_replace_data.htm
	unix/MsgEdit/html/WebHelp/message_window.htm
	unix/MsgEdit/html/WebHelp/open_queue.htm
	unix/MsgEdit/html/WebHelp/pqedit_users.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_client_connection_login.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_client_connection_login_other_properties.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_client_connection_other_properties.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_new_client_connection.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_update_client_connection.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_find.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_open_queue_jms.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_open_queue_wmq.htm
	unix/MsgEdit/html/WebHelp/dialogs/dlg_replace.htm

    1.6.2 AIX

	aix433/MsgEdit/lib/libkxylogin.a
	unix/MsgEdit/bin/kxyvlaix.exe
	unix/MsgEdit/lib/kxymsged.jar

    1.6.3 HP

	hp11/MsgEdit/lib/libkxylogin.sl
	unix/MsgEdit/bin/kxyvlhx.exe
	unix/MsgEdit/lib/kxymsged.jar


    1.6.4 Solaris

	sol273/MsgEdit/lib/libkxylogin.so
	unix/MsgEdit/bin/kxyvlsol.exe
	unix/MsgEdit/lib/kxymsged.jar

    1.6.5 Windows

	INSTALL\KinPathWAI.exe
	MsgEdit\cfg\kxyJKS.bat
	MsgEdit\html\index.htm
	MsgEdit\html\kxyAdPro.htm
	MsgEdit\html\kxyalert.htm
	MsgEdit\html\kxyappfi.htm
	MsgEdit\html\kxyCLgPr.htm
	MsgEdit\html\kxyClLog.htm
	MsgEdit\html\kxyClPro.htm
	MsgEdit\html\kxyColFi.htm
	MsgEdit\html\kxycomit.htm
	MsgEdit\html\kxyconf.htm
	MsgEdit\html\kxyConst.js
	MsgEdit\html\kxyCrJMS.htm
	MsgEdit\html\kxyCrQJM.htm
	MsgEdit\html\kxycrtQ.htm
	MsgEdit\html\kxyCrtWn.js
	MsgEdit\html\kxyCrXML.htm
	MsgEdit\html\kxydebug.htm
	MsgEdit\html\kxyDelFi.htm
	MsgEdit\html\kxydelMW.htm
	MsgEdit\html\kxydelW.htm
	MsgEdit\html\kxyDisQu.htm
	MsgEdit\html\kxyEdJMS.htm
	MsgEdit\html\kxyEdtWn.js
	MsgEdit\html\kxyEdXML.htm
	MsgEdit\html\kxyErrLi.js
	MsgEdit\html\kxyErrTa.js
	MsgEdit\html\kxyErrTr.js
	MsgEdit\html\kxyFilt.htm
	MsgEdit\html\kxyFind.htm
	MsgEdit\html\kxyFoDLQ.htm
	MsgEdit\html\kxyForWn.htm
	MsgEdit\html\kxyGetFi.htm
	MsgEdit\html\kxyGetVa.htm
	MsgEdit\html\kxyHexCr.htm
	MsgEdit\html\kxyhexed.class
	MsgEdit\html\kxyhexed$myTextField.class
	MsgEdit\html\kxyhexed$myTextField$myDocument.class
	MsgEdit\html\kxylCol.htm
	MsgEdit\html\kxyList.js
	MsgEdit\html\kxyLoadW.htm
	MsgEdit\html\kxylogH.htm
	MsgEdit\html\kxymainH.htm
	MsgEdit\html\kxymainW.htm
	MsgEdit\html\kxymenus.js
	MsgEdit\html\kxyMgr.js
	MsgEdit\html\kxyModal.js
	MsgEdit\html\kxymsged.htm
	MsgEdit\html\kxynewCl.htm
	MsgEdit\html\kxyNodes.htm
	MsgEdit\html\kxynwJMS.htm
	MsgEdit\html\kxyopnQ.htm
	MsgEdit\html\kxyopt.htm
	MsgEdit\html\kxyoQJMS.htm
	MsgEdit\html\kxyQMsgW.htm
	MsgEdit\html\kxyRepl.htm
	MsgEdit\html\kxyRePro.htm
	MsgEdit\html\kxyServr.js
	MsgEdit\html\kxyStAtt.htm
	MsgEdit\html\kxyStFmt.htm
	MsgEdit\html\kxystsh.css
	MsgEdit\html\kxySvFil.htm
	MsgEdit\html\kxySvVar.htm
	MsgEdit\html\kxyTable.js
	MsgEdit\html\kxyTree.js
	MsgEdit\html\kxyULoWn.htm
	MsgEdit\html\kxyupdC.htm
	MsgEdit\html\kxyupJMS.htm
	MsgEdit\html\kxyVarDe.htm
	MsgEdit\html\kxyXML.js
	MsgEdit\html\kxyXMLTr.htm
	MsgEdit\html\images\securityExit.gif
	MsgEdit\html\images\securityExit_onclick.gif
	MsgEdit\html\images\threedots.gif
	MsgEdit\html\images\threedots_onclick.gif
	MsgEdit\html\WebHelp\add_client_connection.htm
	MsgEdit\html\WebHelp\cshdat_robohelp.htm
	MsgEdit\html\WebHelp\edit_connection_properties.htm
	MsgEdit\html\WebHelp\find_replace_data.htm
	MsgEdit\html\WebHelp\message_window.htm
	MsgEdit\html\WebHelp\open_queue.htm
	MsgEdit\html\WebHelp\pqedit_users.htm
	MsgEdit\html\WebHelp\dialogs\dlg_client_connection_login.htm
	MsgEdit\html\WebHelp\dialogs\dlg_client_connection_login_other_properties.htm
	MsgEdit\html\WebHelp\dialogs\dlg_client_connection_other_properties.htm
	MsgEdit\html\WebHelp\dialogs\dlg_new_client_connection.htm
	MsgEdit\html\WebHelp\dialogs\dlg_update_client_connection.htm
	MsgEdit\html\WebHelp\dialogs\dlg_find.htm
	MsgEdit\html\WebHelp\dialogs\dlg_open_queue_jms.htm
	MsgEdit\html\WebHelp\dialogs\dlg_open_queue_wmq.htm
	MsgEdit\html\WebHelp\dialogs\dlg_replace.htm
	MsgEdit\lib\kxymsged.jar
	MsgEdit\lib\kxylogin.dll



2.0 PROBLEMS FIXED
------------------

New Fixes in 2.0.0-TIV-EDITORMSGS-IF0004

  IZ03870	TEM GUI NEEDS TO CHECK FIELDSIZE & FIELDCOUNT IN CONFIG.XML FILE TO VALIDATE 
	   	USER VALUES ARE WITHIN RANGE.
  IZ04364	TEM UTILITY TO ENCRYPT THE PASSWORD USED FOR AN SSL CLIENT CONNECTION INTO 
		A STASH FILE                                    
  MR082307226	Ability to switch between formatted and unformatted view without closing 
		and reopening queue.
  MR0823074027	Add sorting on queue view for name, type or depth criteria.
  MR0823076135	Increase maximum number of messages in a display.
  MR0823077124	Ability to specify common directory for unloading/loading of messages.

  New:	SSL client connections might be used also by specifying the Java Key Store (JKS) 
	file. In this case, the sslContext property should not be defined any more and you 
	will not be required any more to implement the kxySSLContext interface.
	If you have a key store generated with the MQ tools of a format different from JKS 
	(for example key.kdb of format CMS), use the MQ utilities runmqckm (on Windows) or 
	gsk7cmd (on UNIX) for converting it to the JKS format (see an example in section 4.1
	"Converting a Key Store to a JKS format").
	Use the provided utilities kxyJKS.bat (on Windows) or kxyJKS.sh (on UNIX) to 
	generate a stash file for the JKS password. This file will be used by the Message 
	Editor (see an example in section 4.2 "Generating a Stash File for the JKS 
	Password").
	In the client connection, define the JKS property to the full path of the JKS file. 
	Both JKS and stash files must be in the same directory.

  New:	<JKS> tag in the config.xml file. If specified, it is represents the global JKS for 
	the client connections using SSL. Any client connection might:
		- overwrite it by defining the JKS or sslContext property. 
		- use it if the sslCipherSuite property is defined. 
		- ignore it if the sslCipherSuite property is not defined. In this case,
		  the client connection is not using SSL.
 
  New:	The maximum number of messages in a display might be set to a higher value than 200.
	In the config.xml file, define the tag <MessageCount> with the new value. For 
	example:

		<MessageCount>1000</MessageCount>

	Restart then the PathWAI Editor for Messages. On the machines from where you access 
	the Message Editor, delete the IE temporary files and clear the Java Plug-in Cache.
	Increasing this value might be done carefully. Setting a too high value might affect 
	the product performance. The IE might encounter problems in displaying and 
	scrolling through a large number of messages. In the same time, keeping a large 
	number of messages in the memory, might lead the server to a quickly out of memory.

  New:	Switch between an unformatted and a formatted view. If you want to view a message 
	formatted and unformatted without having to close the queue and re-open it with or 
	without the option "Ignore message formatting", do the following:

	1. Define with the Message Format Editor the "ChangeView" format in the applications 
	   namespace. The format has a single integer field named "mode".
	2. Define a row filter named "ChangeView" for this new format. Set its value as 
	   "mode==1".
	3. With the queue already opened, select "Tools --> Apply Filters". In the 
	   "Row Data Filters" check or uncheck the "ChangeView" filter. The message view 
	   will switch between formatted and unformatted.

  New:	The list of queues might be sorted by the Name, Type or Depth in ascending or 
	descending order. You will do this by clicking the column. If you click again 
	the same column, the sort order will be reversed.  

  New:	Loading and unloading messages might be performed also on a common directory.
	In this way, messages unloaded by an user might be loaded by another user. 
	The windows for Load and Unload Messages have now a check box 
	"Use Common Directory". If "Use Common Directory" is unchecked, the messages 
	are loaded and unloaded as before (i.e. in the user profile directory).
	If checked, the messages are loaded and unloaded in the common directory (by default 
	it is the global profile directory). You might overwrite the default common 
	directory by specifying its value in the config.xml file under the new tag 
	<LoadPath>. 
	

Fixes from 2.0.0-TIV-EDITORMSGS-IF0003

  IY85195  The configuration tool shows always it's default LDAP settings, even after making 
	   changes to them.
  IY86906  Hexadecimal Editor hangs with Java Plug-in version 1.5. 
  IY89088  Error 2045 while forwarding to a queue on a different queue manager. 
  IY89401  Bad queue names returned for MVS client connections. 
  IY90629  Option for deleting remotely the files used for Load/Unload operations.
  IY90968  Error KXY_ERR_EMPTY_CLIPBOAD on UNIX for Copy/Paste between two local queue 
	   managers.
  IY91060  Messages on MVS are becoming unreadable for Load/Unload.
  IY93406  No option for naming a client connection.
  IY94464  The 'AccessList' property is not working properly for UNIX groups.

  New:	The files used in Load/Unload operations might be deleted remotely. The 'Load' 
	window has now the 'Delete File' check box. Once it is checked, the file will be 
	deleted. 
  New:	The client connection might be named or renamed by defining the 'Alias' property. 
  New:	The TextMessage filter might be used in complex expressions having the OR and AND 
	logical operators and the EQ and NE relational operators.

Fixes from 2.0.0-TIV-EDITORMSGS-IF0002

  IY73084  There is no security for create/delete/update client connections.
  IY74649  Ignore new credentials while accessing a client connection.
  IY75492  Zombie processes are generated on AIX.
  IY76847  Exception received with the 'XML' message type selected  while pasting an XML 
	   message having the xml version tag.
  IY79022  No authorization rules for accessing a client connection.
  IY80639  Exception KXMRC_INVALID_FIELD_NAME while accessing a MVS client connection in 
	   case of queue attributes with empty values (for example 'TPIPE()').
  IY82169  Login validation on Windows supports only the interactive type. It  should 
	   support also the batch, network and service types.
  IY83696  The value of the messageFlags header field is not preserved on distributed 
	   platforms for the copy and load operations.
  IY85712  Users without full MQ authorizations are getting error 2035 while accessing
	   client connections in MQ 6.0.

  New:	<Administrators> tag in the config.xml file. If specified, it restricts the users 
	with access to create/delete/update client connections:

	<Administrators>
		<User>userid1</User>
		<User>userid2</User>
		...
	</Administrators>

  New:	<ClientConnectionCredentials> tag in the config.xml file. If specified with the 
	value 'No', no new credentials might be specified while accessing a client 
	connection.
  New:	The users authorized to access a client connection might be specified by defining 
	the 'AccessList' property in a client connection. Its value is a list of 
	userids/groups separated by comma.
  New:	<AccessListRequired> tag in the config.xml file. If specified with the value 'Yes', 
	no client connection might be accessed unless it has defined the 'AccessList' 
	property.
  New:	With MQ 6.0 on the Message Editor site, security exits might be written also in C. 
	In this case the securityExit value will have format 
	'libraryName(entryPoint) userData'.
  New:	With MQ 6.0 on the Message Editor site, client connections might be also defined 
	through client channel definition table. Use in this respect the predefined 
	channelDefinitionTable property. Its value is a string representing the URL that 
	idendifies the file location (for example "file:///home/admdata/ccdt1.tab" or 
	"ftp://ftp.server/admdata/ccdt2.tab"). 
  New:	SSL client connections are supported. Use in this respect the available ssl* 
	properties from the client connection. The sslContext property requires as value a 
	full Java class name that implements the kxySSLContext interface. This interface is 
	defined in the com.candle.messages.kxy package included in the kxymsged.jar library. 
 	It contains two methods:

	public Object getSSLSocketFactory() throws Throwable;
	// returns the SSLSocketFactory.

	public Collection getSSLCertStores() throws Throwable;
	// returns the SSL CertStores to check certificates for revocation in a Certificate 
	// Revocation List (CRL).

	Your implementation needs to be added in the Message Editor CLASSPATH. You need also
 	JRE at Version 1.4.2. Windows users need to add in the 'ClassPath Suffix' from the 
	kxymsged.control file the jsse.jar and jce.jar libraries present in the 'lib' 
	directory of the JRE.
  New:	For client connections, the property MQAdminUser might be defined. Its value is an 
	userid with full MQ authorizations. It will be used for connecting to the queue 
	manager, while the login userid will be used as an alternate userid for accessing 
	the queues. This represents a solution for APAR IY85712.

Fixes from 2.0.0-TIV-EDITORMSGS-IF0001

  IY69366  Login fails on UNIX for special characters in password.
  IY71970  Login was failing on HP in case the machine was not part of NIS or was the NIS 
	   server.
  132128  The user was not aware of all server actions.
	  The filters could not be accessed after using the 'kxyimpfm' utility.
	  The carriage return characters were lost while updating the messages.
	  The user could not display in WebLogic the JMS queues for which he had 
	  authorities.
	  The Message Editor could not handle simultaneously messages with same formats but 
	  different character codes.
	  The Message Editor did not display ObjectMessage from JMS queues.
	  The securityExit could not be used in interactive mode.
	  The audit data for MQ messages was limitted to message id and correlation id.

Fixes from XY**1003

  1-53173886  Queue opened with "Pass All Context" does not pass the context.
  1-53694141  Users are by default able to delete/clear queues when given access to the 
              SYSTEM.DEFAULT.MODEL.QUEUE.

  New:	<QueueAdmin> tag in config.xml. If specified with value 'No', the 
	create/delete/purge queue commands are disabled.
  New:	<UseClientId> tag in config.xml. If specified with value 'No', the queue manager of 
	a client connection is accessed using the PEM id.
  New:	To list the queues, the logged in user is not required any more to have 'get', 
	'browse', 'put' and 'inq' authorities for the SYSTEM.DEFAULT.MODEL.QUEUE. It's 
	enough the PEM id to have these authorities.
  New:	To create/delete/purge queues, the logged in user is required to have 'get', 
	'browse', 'put' and 'inq' authorities for the SYSTEM.DEFAULT.MODEL.QUEUE and 'put' 
	authority for the SYSTEM.ADMIN.COMMAND.QUEUE. If not, the commands will be disabled.



3.0 APPLYING THE FIX PACK
-------------------------


  3.1 AIX

	1. Extract from the 2.0.0-TIV-EDITORMSGS-IF0004.tar the xyax1007.tar.Z patch.
	2. Stop the PathWAI Editor for Messages if it is running.
	3. Make backup copies of all of the files listed under the heading "1.6.1 All UNIX 
	   platforms" and "1.6.2 AIX".
	4. Copy xyax1007.tar.Z to a temporary directory other than $CANDLEHOME, such as
   	   $CANDLEHOME/tmp.
	5. From $CANDLEHOME, install by issuing:

		uncompress -c tmp/xyax1007.tar.Z | tar xvf -

	6. In case the machine is not part of NIS (i.e. it is a standalone machine) or it is 
	   the NIS server, ensure for the unix/MsgEdit/bin/kxyvlaix.exe file that it has the
	   uid of "root", the gid of "security" and a mode of 4555 (ie setuid). 
	7. Start the PathWAI Editor for Messages.
	8. On the machines from where you access the Message Editor:

	  8.1 Delete the IE Temporary Files.
	  8.2 Clear the Java Plug-in Cache.


  3.2 HP

	1. Extract from the 2.0.0-TIV-EDITORMSGS-IF0004.tar the xyhx1007.tar.Z patch.
	2. Stop the PathWAI Editor for Messages if it is running.
	3. Make backup copies of all of the files listed under the heading "1.6.1 All UNIX 
	   platforms" and "1.6.3 HP".
	4. Copy xyhx1007.tar.Z to a temporary directory other than $CANDLEHOME, such as
	   $CANDLEHOME/tmp.
	5. From $CANDLEHOME, install by issuing:

		uncompress -c tmp/xyhx1007.tar.Z | tar xvf -

	6. In case the machine is not part of NIS (i.e. it is a standalone machine) or it is 
 	   the NIS server, ensure for the unix/MsgEdit/bin/kxyvlhx.exe file that it has the 
	   uid of "root", the gid of "system" and a mode of 4555 (ie setuid). 
	7. Start the PathWAI Editor for Messages.
	8. On the machines from where you access the Message Editor:

	  8.1 Delete the IE Temporary Files.
	  8.2 Clear the Java Plug-in Cache.


  3.3 Solaris

	1. Extract from the 2.0.0-TIV-EDITORMSGS-IF0004.tar the xysl1007.tar.Z patch.
	2. Stop the PathWAI Editor for Messages if it is running.
	3. Make backup copies of all of the files listed under the heading "1.6.1 All UNIX 
	   platforms" and "1.6.4 Solaris".
	4. Copy xysl1007.tar.Z to a temporary directory other than $CANDLEHOME, such as
	   $CANDLEHOME/tmp.
	5. From $CANDLEHOME, install by issuing:

		uncompress -c tmp/xysl1007.tar.Z | tar xvf -

	6. In case the machine is not part of NIS (i.e. it is a standalone machine) or it is 
 	   the NIS server, ensure for the unix/MsgEdit/bin/kxyvlsol.exe file that it has the 
 	   uid of "root", the gid of "system" and a mode of 4555 (ie setuid). 
	7. Start the PathWAI Editor for Messages.
	8. On the machines from where you access the Message Editor:

	  8.1 Delete the IE Temporary Files.
	  8.2 Clear the Java Plug-in Cache.


  3.4 Windows

	1. Extract from the 2.0.0-TIV-EDITORMSGS-IF0004.tar the xyws1007.exe patch.
	2. Stop the PathWAI Editor for Messages if it is running.
	3. Make backup copies of all of the files listed under the heading "1.6.5 Windows". 
	4. Copy xyws1007.exe to the %CANDLEHOME%.
	5. From %CANDLEHOME%, install by issuing:

		xyws1007 -d -o

	6. Start the PathWAI Editor for Messages.
	7. On the machines from where you access the Message Editor:

	  7.1 Delete the IE Temporary Files.
	  7.2 Clear the Java Plug-in Cache.



4.0 ADDITIONAL INSTRUCTIONS FOR SSL CLIENT CONNECTIONS
------------------------------------------------------


  4.1 Converting a Key Store to a JKS format

	This section contains an example for converting the key.kdb key store of CMS format 
	to the new JKS format. Please refer to the MQ documentation for a complete 
	description of the runmqckm and gsk7cmd utilities.


    4.1.1 UNIX


	1. Set your JAVA_HOME environment variable. Usually these are the values:

	AIX	export JAVA_HOME=/usr/mqm/ssl/jre 
	HP-UX	export JAVA_HOME=/opt/mqm/ssl 
	Linux	export JAVA_HOME=/opt/mqm/ssl/jre 
	Solaris	export JAVA_HOME=/opt/mqm/ssl 

	2. Set your PATH to include the directory of the gsk7cmd utility.

	3. From the directory where you have the key.kdb file, run:

	gsk7cmd -keydb -convert -db key.kdb -pw <password> -old_format cms -new_format jks

	This will generate the key store file key.jks.

    4.1.2 Windows

	From the directory where you have the key.kdb file, run:

	runmqckm -keydb -convert -db key.kdb -pw <password> -old_format cms -new_format jks

	This will generate the key store file key.jks.


  4.2 Generating a Stash File for the JKS Password

    4.2.1 UNIX

	1. If you have already customized the $CANDLEHOME/unix/MsgEdit/bin/kxyJKS.sh file, 
	   then go direct to step 5.
	2. Copy the $CANDLEHOME/unix/MsgEdit/cfg/kxyJKS.sh file into the 
	   $CANDLEHOME/unix/MsgEdit/bin directory.
	3. Customize the $CANDLEHOME/unix/MsgEdit/bin/kxyJKS.sh file with your values for 
	   |JAVA_HOME| and |CANDLE_MSGEDIT_HOME|.
	4. Change the mode of the $CANDLEHOME/unix/MsgEdit/bin/kxyJKS.sh file to execute.
	5. From the $CANDLEHOME/unix/MsgEdit/bin directory, run:
	   
	   ./kxyJKS.sh <full_path_of_JKS_file> <password>

	   This will generate in the same directory of the JKS file, a file with the same 
	   name and the extension ".crd".

    4.2.2 Windows

	1. If you have already customized the %CANDLEHOME%\msgedit\bin\kxyJKS.bat file, 
	   then go direct to step 5.
	2. Copy the %CANDLEHOME%\msgedit\cfg\kxyJKS.bat file into the 
	   %CANDLEHOME%\msgedit\bin directory.
	3. Customize the %CANDLEHOME%\msgedit\bin\kxyJKS.bat file with your values for 
	   |JAVA_HOME| and |CANDLE_MSGEDIT_HOME|.
	4. From the %CANDLEHOME%\msgedit\bin directory, run:
	   
	   kxyJKS <full_path_of_JKS_file> <password>

	   This will generate in the same directory of the JKS file, a file with the same 
	   name and the extension ".crd".



5.0 UNINSTALLING THE FIX PACK
-----------------------------

1. Stop the PathWAI Editor for Messages if it is running.
2. Copy the replaced modules from the backup directory created in "APPLYING THE FIX PACK" 
   in section 3.0 to the locations indicated in the "Files Replaced or Added by this Patch" 
   in section 1.6.
3. Start the PathWAI Editor for Messages.




