Unable to publish message to MQ service due to SSL Peer name no match error in MQ service

Products

• CA Application Test
• CA Continuous Application Insight (PathFinder)
• Service Virtualization

Issue/Introduction

Unable to publish/subscribe messages to MQ service, and it is giving below errors in vse logs

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2398;AMQ9204: Connection to host 'mq4u-il4asdter.lb.ca.com(63320)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2398;AMQ9636: SSL distinguished name does not match peer name, channel '?'. [4=CN=IL4UCTLV, OU=Application ID - MQ4U, O=ABC BANK, C=US]],3=mq4u-il4uwslv.lb.wellsfargo.com(63320),5=RemoteTCPConnection.protocolConnect] 

at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:2062) 

at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:1226) 

at com.ibm.mq.ese.jmqi.InterceptedJmqiImpl.jmqiConnect(InterceptedJmqiImpl.java:311) 

at com.ibm.mq.ese.jmqi.ESEJMQI.jmqiConnect(ESEJMQI.java:337) 

at com.ibm.msg.client.wmq.internal.WMQConnection.<init>(WMQConnection.java:348) 

... 17 more 

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2398;AMQ9636: SSL distinguished name does not match peer name, channel '?'. [4=CN=IL4UCTLV, OU=Application ID - MQ4U, O=ABC BANK, C=US] 

at com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:1391) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnection.connect(RemoteConnection.java:724) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnectionSpecification.getSessionFromNewConnection(RemoteConnectionSpecification.java:400) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnectionSpecification.getSession(RemoteConnectionSpecification.java:299) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnectionPool.getSession(RemoteConnectionPool.java:164) 

at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:1599) 

 

Environment

All supported DevTest releases.

MQ version 7

Cause

Common name used in SSL certificate (CN=IL4UCTLV) is not matching with channel name given in MQ step. Due to this, SSL validation throwing error as "SSL distinguished name does not match peer name"

Resolution

 Modify channel name in VSM file with common name given in certificate, redeploy the service.