MQMonitor Error: 2393 MQRC_SSL_INITIALIZATION_ERROR with SSL CipherSpec

Products

• CA Application Performance Management Agent (APM / Wily / Introscope)
• INTROSCOPE

Issue/Introduction

Depending on which CipherSpec you use for SSL connection to your MQ Queue Manager from the MQMonitor agent, you may observe the following errors in the MQMonitor log:

2393 MQRC_SSL_INITIALIZATION_ERROR

Ciphers we have seen generating this error include:

• TLS_RSA_WITH_AES_128_CBC_SHA
• FIPS_WITH_3DES_EDE_CBC_SHA.

cipherspec is specified in MQMonitor.properties:

# <Queue Manager>@<Host>.channel.ssl.cipherspec
# SSL cipherspec of the given Queue Manager to be monitored
# Default=none, if it is not set
#
[email protected] = XXXXX_XXXXX

Environment

Component: APMPPK

Resolution

• This problem is governed by the type of JVM used.
• We recommend using the latest IBM JVM to run the MQMonitor, as it provides support for CipherSpecs that may be unavailable with an Oracle JVM.
• It was noted that TRIPLE_DES_SHA_US works with both IBM and Oracle JVMs.