When trying to implement SSL in CA APM MQMonitor Agent using TLS 1.2 cipherspec TLS_RSA_WITH_AES_128_CBC_SHA256 it fails with log messages "Reason Code: 2397 MQRC_JSSE_ERROR" and "Incorrect cipherSpec"

book

Article ID: 5279

calendar_today

Updated On:

Products

APP PERF MANAGEMENT CA Application Performance Management Agent (APM / Wily / Introscope) CUSTOMER EXPERIENCE MANAGER INTROSCOPE

Issue/Introduction

When trying to implement SSL in MQMonitor Agent using TLS 1.2 cipherspec TLS_RSA_WITH_AES_128_CBC_SHA256 it is failing and these messages are visible in the agent log:

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.trace.MQQMConnectionManager] MQQMConnectionManager.mqConnect(ConfigurationInstance, boolean) An MQException has occured. Reason Code: 2397 MQRC_JSSE_ERROR while trying to connect to configuration instance ...

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.TracerDriverThread] Incorrect cipherSpec 

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.trace.MQQMConnectionManager] MQQMConnectionManager.mqConnect(ConfigurationInstance, boolean) Incorrect cipherSpec for configuration instance ...

Cause

The MQMonitor agent does not support TLS 1.2 ciphers until the most recent release APM 10.5

Environment

APM 9.6, 9.7, 10.0, 10.1, 10.2, 10.3

Resolution

The APM 10.5 MQMonitor agent can be installed to get the TLS 1.2 cipher support and is compatible with any 10.x Enterprise Manager cluster.

Additional Information

  Note that the APM EM/Agent are dependent also on the specific Java release for TLS Version Support.