Unable to publish message to MQ service due to SSL Peer name no match error in MQ service

Article Id: 37591
Status: Published
Updated On: 14-02-2018 07:36
Legacy Id: TEC1332634
Products:
CA Application Test Service Virtualization CA Continuous Application Insight (PathFinder)
Issue/Introduction:

Issue : 

Unable to publish/subscribe messages to MQ service, and it is giving below errors in vse logs

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2398;AMQ9204: Connection to host 'mq4u-il4asdter.lb.ca.com(63320)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2398;AMQ9636: SSL distinguished name does not match peer name, channel '?'. [4=CN=IL4UCTLV, OU=Application ID - MQ4U, O=ABC BANK, C=US]],3=mq4u-il4uwslv.lb.wellsfargo.com(63320),5=RemoteTCPConnection.protocolConnect] 

at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:2062) 

at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:1226) 

at com.ibm.mq.ese.jmqi.InterceptedJmqiImpl.jmqiConnect(InterceptedJmqiImpl.java:311) 

at com.ibm.mq.ese.jmqi.ESEJMQI.jmqiConnect(ESEJMQI.java:337) 

at com.ibm.msg.client.wmq.internal.WMQConnection.<init>(WMQConnection.java:348) 

... 17 more 

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2398;AMQ9636: SSL distinguished name does not match peer name, channel '?'. [4=CN=IL4UCTLV, OU=Application ID - MQ4U, O=ABC BANK, C=US] 

at com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:1391) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnection.connect(RemoteConnection.java:724) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnectionSpecification.getSessionFromNewConnection(RemoteConnectionSpecification.java:400) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnectionSpecification.getSession(RemoteConnectionSpecification.java:299) 

at com.ibm.mq.jmqi.remote.impl.RemoteConnectionPool.getSession(RemoteConnectionPool.java:164) 

at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:1599) 

 Environment:  

MQ version 7

Devtest 8.4

Cause: 

Common name used in SSL certificate (CN=IL4UCTLV) is not matching with channel name given in MQ step. Due to this, SSL validation throwing error as "SSL distinguished name does not match peer name"

 Resolution:

   Modify channel name in VSM file with common name given in certificate, redeploy the service.

Environment:

Release: LSASVR99000-8.3-LISA-Server
Component: