Getting unsupported cipher suite error while enabling SSL in MQ service.
search cancel

Getting unsupported cipher suite error while enabling SSL in MQ service.

book

Article ID: 204854

calendar_today

Updated On:

Products

CA Cloud Test Mobile CA Application Test

Issue/Introduction

Enabled SSL on MQ environment and are having an issue with the SSL connection from the devtest environment. Seen the below errors in logs

MQRC_SSL_INITIALIZATION_ERROR

Cipher Spec: TLS_RSA_WITH_AES_128_CBC_SHA256Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2393;AMQ9204: Connection to host 'hostname.domin.com(2414)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2393;AMQ9771: SSL handshake failed. [1=java.lang.IllegalArgumentException[Unsupported ciphersuite SSL_RSA_WITH_AES_128_CBC_SHA256],3=hostname.domin.com/XXX.XXX.XXX.XXX:2414 (hostname.domin.com),4=SSLSocket.createSocket,5=default]],3=hostname.domin.com(2414),5=RemoteTCPConnection.makeSocketSecure]

Getting an error unsupported cipher suite while enabling SSL in MQ service.

 

 

Environment

Devtest 10.7
CA Service Virtualization

Cause

Incorrect SSL setup for MQ Queues caused the issue.

Resolution

Please follow the link below, and go over each step to set up the MQ configuration.

https://community.broadcom.com/communities/community-home/librarydocuments/viewdocument?DocumentKey=a66042d2-19fb-44ae-b8f7-f34b63e535e3

The Third-party jars needed for MQ9 is listed here

https://techdocs.broadcom.com/us/en/ca-enterprise-software/devops/devtest-solutions/10-7/administering/general-administration/third-party-file-requirements.html