MQSeries.net :: View topic - [ClientConnectionErr]AMQ9633:Bad SSL certificate for channel

hellosummer2013 · Posted: Wed Sep 12, 2012 7:43 pm Post subject:

[Products]
MQ 7.0.1.9 on MQSERVER
WPG 6.1.0.43 on WPGSERVER
WPG connect to the queue manager by JMS. it connected to the server connection channel with "client" connection mode

[Background]
The MQ previous version is MQ 7.0.1.6.
I installed MQ 7.0.1.9 fix patch yesterday.
After installation. the WPG failed to connect the queue manager with "client" connection mode.

[Error Message]
[WPG Side]
[9/13/12 1:18:25:124 UTC] 00000045 JmsReceiverPr E com.ibm.bcg.server.receiver.JmsReceiverProcessor trace Got exception while Polling: JMSWMQ0018: Failed to connect to queue manager '******' with connection mode 'Client' and host name '******(1414)'.
com.ibm.msg.client.jms.DetailedJMSException: JMSWMQ0018: Failed to connect to queue manager '******' with connection mode 'Client' and host name '******(1414)'. Check the queue manager is started and if running in client mode, check there is a listener running. Please see the linked exception for more information.
at com.ibm.msg.client.wmq.common.internal.Reason.reasonToException(Reason.java:608)
at com.ibm.msg.client.wmq.common.internal.Reason.createException(Reason.java:236)
at com.ibm.msg.client.wmq.internal.WMQConnection.<init>(WMQConnection.java:448)
at com.ibm.msg.client.wmq.factories.WMQConnectionFactory.createV7ProviderConnection(WMQConnectionFactory.java:7160)
at com.ibm.msg.client.wmq.factories.WMQConnectionFactory.createProviderConnection(WMQConnectionFactory.java:6551)
at com.ibm.msg.client.jms.admin.JmsConnectionFactoryImpl.createConnection(JmsConnectionFactoryImpl.java:295)
at com.ibm.mq.jms.MQConnectionFactory.createCommonConnection(MQConnectionFactory.java:6232)
at com.ibm.mq.jms.MQQueueConnectionFactory.createQueueConnection(MQQueueConnectionFactory.java:115)
at com.ibm.bcg.server.receiver.JmsReceiverProcessor.getConnection(JmsReceiverProcessor.java:358)
at com.ibm.bcg.server.receiver.JmsReceiverProcessor.connect(JmsReceiverProcessor.java:304)
at com.ibm.bcg.server.receiver.JmsReceiverProcessor.run(JmsReceiverProcessor.java:1835)
Caused by: com.ibm.mq.MQException: JMSCMQ0001: WebSphere MQ call failed with compcode '2' ('MQCC_FAILED') reason '2397' ('MQRC_JSSE_ERROR').
at com.ibm.msg.client.wmq.common.internal.Reason.createException(Reason.java:223)
... 9 more
Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2397;AMQ9204: Connection to host '******(1414)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2397;AMQ9771: SSL handshake failed. [1=javax.net.ssl.SSLHandshakeException[Received fatal alert: bad_certificate],3=******:1414 (sg2as119.sg2.michelin.com),4=SSLSocket.startHandshake,5=default]],3=******(1414),5=RemoteTCPConnection.protocolConnect]
at com.ibm.mq.jmqi.remote.internal.RemoteFAP.jmqiConnect(RemoteFAP.java:2011)
at com.ibm.mq.jmqi.remote.internal.RemoteFAP.jmqiConnect(RemoteFAP.java:1228)
at com.ibm.msg.client.wmq.internal.WMQConnection.<init>(WMQConnection.java:363)
... 8 more
Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2397;AMQ9771: SSL handshake failed. [1=javax.net.ssl.SSLHandshakeException[Received fatal alert: bad_certificate],3=******:1414 (******),4=SSLSocket.startHandshake,5=default]
at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:1022)
at com.ibm.mq.jmqi.remote.internal.system.RemoteConnection.connect(RemoteConnection.java:1152)
at com.ibm.mq.jmqi.remote.internal.system.RemoteConnectionPool.getConnection(RemoteConnectionPool.java:350)
at com.ibm.mq.jmqi.remote.internal.RemoteFAP.jmqiConnect(RemoteFAP.java:1600)
... 10 more
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate
at com.ibm.jsse2.n.a(n.java:42)
at com.ibm.jsse2.n.a(n.java:43)
at com.ibm.jsse2.pc.b(pc.java:569)
at com.ibm.jsse2.pc.a(pc.java:506)
at com.ibm.jsse2.pc.g(pc.java:502)
at com.ibm.jsse2.pc.a(pc.java:338)
at com.ibm.jsse2.pc.startHandshake(pc.java:548)
at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection$6.run(RemoteTCPConnection.java:1007)
at java.security.AccessController.doPrivileged(AccessController.java:192)
at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:1002)
... 13 more

[MQ side]

09/13/12 09:35:27 - Process(11862112.271996) User(mqm) Program(amqrmppa)
Host(MQSERVER)
AMQ9633: Bad SSL certificate for channel '????'.

EXPLANATION:
A certificate encountered during SSL handshaking is regarded as bad for one of
the following reasons:
(a) it was formatted incorrectly and could not be validated
(b) it was formatted correctly but failed validation against the Certification
Authority (CA) root and other certificates held on the local system
(c) it was found in a Certification Revocation List (CRL) on an LDAP server
(d) a CRL was specified but the CRL could not be found on the LDAP server
(e) an OCSP responder has indicated that it is revoked

The channel is '????'; in some cases its name cannot be determined and so is
shown as '????'. The remote host is 'WPGSERVER'. The channel did
not start.
ACTION:
Check which of the possible causes applies on your system. Correct the error,
and restart the channel.