title: SSL/TLS handshake between Websphere MQ Server and Client
body: <p>I'm debugging SSL errors between Websphere MQ Server and Client using T.Rob's suggestions and need help understanding the SSL handshake (<a href="https://stackoverflow.com/questions/12907472/ssl-connect-to-mq-using-net-mq-client-sslv3">SSL connect to MQ using .net mq client SSLV3?</a>). </p>
  
  <p>My WMQ 7.5 client application is C code and uses a keystore (.kdb). Utilizing a CHLTAB provided by the WebSphere admin. The WMQ server is running Java and the channel is defined with mutual authentication.  </p>
  
  <p>The article states that in the SSL/TLS handshake, the server always sends its public certificate in response to a connections request. The client then must validate that certificate by first checking the signature and validity date, then looking in its trust store for the thing that signed the certificate.</p>
  
  <p>Here's my confusion:  Since my keystore on the client side has only the application personal cert, how does the client validate the public certificate sent by the server?  I have provided the Common Name of my application cert to the WebSphere server admin but nothing more than that.    </p>
  
  <p>Thanks in advance for the clarification!</p>