When trying to implement SSL in CA APM MQMonitor Agent using TLS 1.2 cipherspec TLS_RSA_WITH_AES_128_CBC_SHA256 it fails with log messages "Reason Code: 2397 MQRC_JSSE_ERROR" and "Incorrect cipherSpec"

Products

• CA Application Performance Management Agent (APM / Wily / Introscope)
• INTROSCOPE

Issue/Introduction

When trying to implement SSL in MQMonitor Agent using TLS 1.2 cipherspec TLS_RSA_WITH_AES_128_CBC_SHA256 it is failing and these messages are visible in the agent log:

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.trace.MQQMConnectionManager] MQQMConnectionManager.mqConnect(ConfigurationInstance, boolean) An MQException has occured. Reason Code: 2397 MQRC_JSSE_ERROR while trying to connect to configuration instance ...

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.TracerDriverThread] Incorrect cipherSpec 

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.trace.MQQMConnectionManager] MQQMConnectionManager.mqConnect(ConfigurationInstance, boolean) Incorrect cipherSpec for configuration instance ...

Environment

APM 9.6, 9.7, 10.0, 10.1, 10.2, 10.3

Cause

The MQMonitor agent does not support TLS 1.2 ciphers until the most recent release APM 10.5

Resolution

The APM 10.5 MQMonitor agent can be installed to get the TLS 1.2 cipher support and is compatible with any 10.x Enterprise Manager cluster.

Additional Information

  Note that the APM EM/Agent are dependent also on the specific Java release for TLS Version Support.