Author |
Message |
Topic: WebSphere MQ call failed '2400' ('MQRC_UNSUPPORTED_CIPHER_SU |
zpat
Replies: 13 Views: 11346
|
Forum: IBM MQ Security Posted: Tue Jan 12, 2021 11:59 am Subject: WebSphere MQ call failed '2400' ('MQRC_UNSUPPORTED_CIPHER_SU |
The SSL context says IBMJSSE2
Do they need to enable TLS 1.0 somewhere? I know some patching levels of Unix disable it. |
Topic: WebSphere MQ call failed '2400' ('MQRC_UNSUPPORTED_CIPHER_SU |
zpat
Replies: 13 Views: 11346
|
Forum: IBM MQ Security Posted: Tue Jan 12, 2021 5:37 am Subject: MQRC 2400 Possible Causes? |
WAS 8.5.5 on RHEL
MQ Z/OS 9.0.0 QM
WAS is getting a MQRC 2400 (Cipher not supported).
What are the possible causes of this?
Cipher is set to SSL_RSA_WITH_AES_128_CBC_SHA |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Wed Dec 02, 2020 9:41 am Subject: Effect of shared conversation on CHIN/MCA overhead |
These CHINs are on production Z14s - not hitting 100% CPU overall. |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Sat Nov 28, 2020 11:50 pm Subject: Effect of shared conversation on CHIN/MCA overhead |
I don't have a pass to enter the hallowed portal of z/os systems programming.
Before I risk disturbing the demi-Gods, what sort of issue are you suggesting here? |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Thu Nov 26, 2020 11:12 pm Subject: Effect of shared conversation on CHIN/MCA overhead |
In prod - 96 adapter, 60 dispatcher, 8 SSL tasks. |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Thu Nov 19, 2020 4:44 am Subject: Effect of shared conversation on CHIN/MCA overhead |
The issue is that for various reasons the developers of an application (already in production) want to change their connection model from one connect - many messages, to one connect - one message.
... |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Thu Nov 19, 2020 3:53 am Subject: Effect of shared conversation on CHIN/MCA overhead |
This blog is interesting (The cost of connecting to a z/OS queue manager)
https://community.ibm.com/community/user/imwuc/viewdocument/the-cost-of-connecting-to-a-zos-qu?CommunityKey=b382f2ab-42f1 ... |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Wed Nov 18, 2020 11:18 pm Subject: Effect of shared conversation on CHIN/MCA overhead |
So the question is really - does using shared conversations mitigate the increased overhead (e.g. 5 times the CPU) of making a fresh connection for each message for a MQ client application connecting ... |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Tue Nov 17, 2020 7:43 am Subject: Effect of shared conversation on CHIN/MCA overhead |
TLS 1.2 cipher is used. Network is internal so pretty fast. No exits.
I have observed 5 different connections with 10 conversations allowed (and active) per connections.
So it is re-using the TC ... |
Topic: Effect of shared conversation on CHIN/MCA overhead |
zpat
Replies: 20 Views: 4375
|
Forum: General IBM MQ Support Posted: Mon Nov 16, 2020 5:49 am Subject: Effect of shared conversation on CHIN/MCA overhead |
Let's assume we have an application which connects to MQ for every message that it puts/gets from their queues (request/reply) then disconnects.
I know this is not the best practice but what I woul ... |
Topic: Relative overhead of ciphers on MQ channels z/os |
zpat
Replies: 9 Views: 2397
|
Forum: Mainframe, CICS, TXSeries Posted: Sun Oct 11, 2020 7:05 am Subject: Relative overhead of ciphers on MQ channels z/os |
That restriction does not apply to z/OS MQ, already checked with the support center. |
Topic: Relative overhead of ciphers on MQ channels z/os |
zpat
Replies: 9 Views: 2397
|
Forum: Mainframe, CICS, TXSeries Posted: Wed Oct 07, 2020 10:41 pm Subject: Relative overhead of ciphers on MQ channels z/os |
Thanks for that. Yes I assume that z/OS 2.3 on a z/14 will use the cryptographic processor.
In fact the CHIN needs RACF read access to a resource in the CSFSERV class for the GCM cipher to work at ... |
Topic: Relative overhead of ciphers on MQ channels z/os |
zpat
Replies: 9 Views: 2397
|
Forum: Mainframe, CICS, TXSeries Posted: Wed Oct 07, 2020 5:53 am Subject: Relative overhead of ciphers on MQ channels z/os |
We have a MQ sender/receiver channel pair to another QM - one end is z/OS MQ v9.0 and the other end is z/OS MQ v9.1
It's high volume (hundreds per second) and currently secured with the TLS 1.2 ci ... |
Topic: How to solve message retry delays impacting others |
zpat
Replies: 19 Views: 4613
|
Forum: General IBM MQ Support Posted: Wed Sep 30, 2020 4:16 am Subject: How to solve message retry delays impacting others |
When it (the off mainframe app) works it does keep the queue depth mostly at zero.
But yes I was tempted to use an analogy like a Roll-Royce hitched to a Moped. |
Topic: QSG CHIN high CPU / workload skew - why ? |
zpat
Replies: 13 Views: 2961
|
Forum: General IBM MQ Support Posted: Tue Sep 29, 2020 6:04 am Subject: QSG CHIN high CPU / workload skew - why ? |
SCTQ "Message rellocation" can consume a lot of CPU, check for retrying channels. |