MQSeries.net :: View topic

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » MQ7.5 SSL FIPS

MQ7.5 SSL FIPS

« View previous topic :: View next topic »

Author

Message

brianb

Posted: Thu May 02, 2013 9:45 pm Post subject: MQ7.5 SSL FIPS

Voyager

Joined: 12 May 2010
Posts: 85

Hi

I am trying to setup a JMS client connection using SSL on a new MQ7.5 install on WINX

On the channel I have
SSL_RSA_WITH_3DES_EDE_CBC_SHA
and also set in the JMS code

(Note this was working on MQ 7.0.1.9)

On MQ7.5 with channel SSL_RSA_WITH_3DES_EDE_CBC_SHA

I now get a 2397 error inWAS and AMQ9665: SSL connection closed by remote end of channel '????' in MQ error logs

However if set the channel to FIPS_WITH_3DES_EDE_CBC_SHA
all works at least with MQExplorer and only FIPS seems to work

The QMGR does not have FIPS enabled
SSLFIPS(NO)

Anyone seen this ?

brianb

Posted: Sun May 05, 2013 4:18 pm Post subject: Resolved

Voyager

Joined: 12 May 2010
Posts: 85

issue was resolved

My issue seems to be with MQ7.0.1.9 and MQ7.5 installed on same LPAR and how key management works in this envoronment

When I built on just a MQ7.5 install all worked as designed...go figure

thanks

hughson

Posted: Thu May 09, 2013 8:01 am Post subject: Re: MQ7.5 SSL FIPS

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

brianb wrote:

The QMGR does not have FIPS enabled
SSLFIPS(NO)

N.B. When using SSLFIPS(NO) you can choose any cipherspec

It is only when you use SSLFIPS(YES) that some cipherspecs are not allowed.

Cheers
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » MQ7.5 SSL FIPS

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP