Quickfixn SSL配置问题

Question

Im trying to configure my quickfix to initiate SSL connection, I tried a lot ok googling and went with the below configuration and im getting following error. Will be great if some one can give suggestions on this.

Configuration:

    [DEFAULT]
    ConnectionType=initiator
    ReconnectInterval=200
    FileStorePath=E:/Vivek/SourceCodes/Swiss/PrimoLiquidity/PrimeLiquidity/bin/Debug/FixLogs/MarketDataLogs
    FileLogPath=E:/Vivek/SourceCodes/Swiss/PrimoLiquidity/PrimeLiquidity/bin/Debug/FixLogs/MarketDataLogs
    StartTime=00:00:00
    EndTime=00:00:00
    UseDataDictionary=Y
    DataDictionary=E:/Vivek/SourceCodes/Swiss/PrimoLiquidity/PrimeLiquidity/bin/Debug/FIX44.xml
    SocketConnectPort=2525
    SocketConnectHost=70.42.18.200
    ResetOnLogon=Y
    ValidateFieldsOutOfOrder=N
    SSLEnable=Y
    SSLValidateCertificates=N
    SSLCheckCertificateRevocation=N
    SSLCertificate=C:/Users/Vivek/NewCert.pfx
    SSLCertificatePassword=12345


    # standard config elements

    [SESSION]
    BeginString=FIX.4.4
    SenderCompID=quote.DEMOSUCD.530
    SenderSubID=DEMOSUCD
    TargetCompID=demo.fxgrid
    HeartBtInt=30

Error:

 20170310-19:40:45.089 : Unable to perform authentication against server: A call to SSPI failed, see inner exception.
 20170310-19:40:45.089 : Connection failed (AuthenticationException): A call to SSPI failed, see inner exception.

Answer 1

I have done this extensively before, not through the QuickFIX API but through stunnel. See here . It think you should use this to set up a persistent SSL connection. It might take a bit of time to configure, but once you get it you don't have to worry about it again.

Answer 2

Where does this error come from - your side or the counterparty side? What's the SSPI inner exception say?

There's something about SSPI and quick fix here that the certificate is not in the Windows cert store.

I also agree with Wapiti: use stunnel