| Author |
Message |
 Topic: Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA |
crusader
Replies: 4
Views: 9706
|
 Forum: IBM MQ Security Posted: Wed Jan 13, 2016 9:52 pm Subject: Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA |
| I set "No" for "SSL_FIPS Required" to |
| Topic: Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA |
crusader
Replies: 4
Views: 9706
|
Forum: IBM MQ Security Posted: Wed Jan 13, 2016 6:21 pm Subject: Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA |
I'm trying to establish TLS connection from mq client to mq server.
my mq server version is 7.0, i use TLS_RSA_WITH_AES_128_CBC_SHA as cipher spec for my channel on mq server side.
my mq client ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Wed Jan 13, 2016 6:17 pm Subject: IBM MQ 2397 Error |
Thank you.
I put below line in my jvm option and it works, miracel happened 
-Dcom.ibm.jsse2.disableSSLv3=false
Thank you guys |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Thu Jan 07, 2016 1:18 am Subject: IBM MQ 2397 Error |
| if i want to connect using jms client, shall i use MQQueueConnectionFactory or MQConnectionFactory to use cipherspec? |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Wed Jan 06, 2016 11:00 pm Subject: IBM MQ 2397 Error |
yes i set "RC4_MD5_US" to Channel on MQ Server side. meaning i dun need to define cipher suite if i try sending message using amqsputc from mq client machine?
AFAIK i need to set two envi ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Wed Jan 06, 2016 8:04 pm Subject: IBM MQ 2397 Error |
| However due to some default, it may be advisable to also have your own cert for the client<<<< does it mean i need to have my keystore in which my own cert is? and another truststore in wh ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Tue Jan 05, 2016 10:17 pm Subject: IBM MQ 2397 Error |
which java version shall i use? is it a must i must use kdb instead of jks since i'm using websphere mq?
i tried creating self-signed using both key database management UI from IBM and java keytool ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Tue Jan 05, 2016 6:11 pm Subject: IBM MQ 2397 Error |
| my mq server is 7.0.1.6 and mq client jar i'm using is 7.5.0.2 |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Tue Jan 05, 2016 6:08 pm Subject: IBM MQ 2397 Error |
| my key size is 1024, cipher spec i set at mq server is "RCR_MD5_US" and cipher suite I set on my client is "SSL_RSA_WITH_RC4_128_MD5". So I believe it's match on both side but i ha ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Mon Jan 04, 2016 6:37 pm Subject: IBM MQ 2397 Error |
That's what I have done on both server & client site,
At server side
create keystore >>> keytool -genkey -alias ibmwebspheremqqm1 -keyalg RSA -keystore keystore.jks
export server c ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Wed Dec 30, 2015 7:27 pm Subject: IBM MQ 2397 Error |
| i followed those steps i found from google but still can't resolve that mq error 2397 |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Tue Dec 29, 2015 11:15 pm Subject: IBM MQ 2397 Error |
can you plz kinldy share me how you configure to set up two way ssl on both server & client site ? I would like to verify the steps i have taken is correct or not  |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Tue Dec 29, 2015 11:01 pm Subject: IBM MQ 2397 Error |
yes i have put server cert to the client's truststore but i'm facing mq error 2397. it seems the way i generated server cert of the way i import to client truststore is wrong.
i'm not using browser ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Tue Dec 29, 2015 10:20 pm Subject: IBM MQ 2397 Error |
i'm creating self-signed only
i'm still stucking on that issue.
first, i created keystore. Then i created self-signed certificate and extract into "server.der" file.
Then copy to ... |
| Topic: IBM MQ 2397 Error |
crusader
Replies: 26
Views: 43261
|
Forum: IBM MQ Security Posted: Mon Dec 28, 2015 7:25 pm Subject: IBM MQ 2397 Error |
yes, it would be a long post if u dun mind
for now, i want to know If i need to set keystore and truststore in following settings at MQ Server side?
https://plus.google.com/photos/photo/10690 ... |
