Unable to connect to WebSphere MQ after upgrading to GW 11..x

Products

• CA API Gateway

Issue/Introduction

After upgrading gateway to 11.x  the connection to IBM Websphere MQ 9.x does not work anymore.

The connection to MQ is falling with a "SSL handshake failure".

The error in the logs looks like : 

net.ssl.HandshakeCompletedEvent.getPeerCertificateChain(Unknown Source)\n\tat com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.handshakeCompleted(RemoteTCPConnection.java:2152)\n\tat java.base/sun.security.ssl.TransportContext$NotifyHandshake$1.run(Unknown Source)\n\tat java.base/sun.security.ssl.TransportContext$NotifyHandshake$1.run(Unknown Source)\n\tat java.base/java.security.AccessController.doPrivileged(Unknown Source)\n\tat java.base/sun.security.ssl.TransportContext$NotifyHandshake.run(Unknown Source)\n\tat java.base/java.lang.Thread.run(Unknown Source)\n","package":"com.l7tech.util.UncaughtExceptionLogger","level":"SEVERE","log":{"message":"Uncaught exception in thread HandshakeCompletedNotify-Thread [Id:879]."},"time":"2024-05-13T13:34:01.064+0000"}
    Line 3364: {"exception":"java.lang.UnsupportedOperationException: This method is deprecated and marked for removal. Use the getPeerCertificates() method instead.\n\tat java.base/javax.net.ssl.SSLSession.getPeerCertificateChain(Unknown Source)\n\tat java.base/javax.net.ssl.HandshakeCompletedEvent.getPeerCertificateChain(Unknown Source)\n\tat com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.handshakeCompleted(RemoteTCPConnection.java:2152)\n\tat

Environment

gateway 11.x 

Resolution

The problem is related to the IBM jar files installed on the gateway for WebSphere MQ support 

see the following section in the documentation :

Install the JMS Interface

The current version 9.2.x of these IBM libraries do not support JAVA 17 which is included with gateway 11.1 

See the following topic on the IBM website about java 17 support for WebSphere MQ 9.2.x and 9.3.x

Java 17 support for IBM MQ Clients