ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexGeneral IBM MQ SupportSSL error

Post new topicReply to topic
SSL error View previous topic :: View next topic
Author Message
sarabennet
PostPosted: Thu Jan 16, 2020 5:44 am Post subject: SSL error Reply with quote

Novice

Joined: 23 Jun 2019
Posts: 12

Hi All,

We are using MQ 9.1.03 and using MQMON to connect to MQ. We are getting RC(2381) SSL Key Repository error in MQMON and the below error in MQ logs.We have speciifoed the same SSLCIPH in MQ MON as well as SVRCONN channel. Could someone pls help to understand where the issue is

AMQ9639E: Remote channel 'ABC.TEST' did not specify a CipherSpec.

EXPLANATION:
Remote channel 'ABC.TEST' did not specify a CipherSpec when the local
channel expected one to be specified.
Back to top
View user's profile Send private message
HubertKleinmanns
PostPosted: Thu Jan 16, 2020 6:09 am Post subject: Reply with quote

Shaman

Joined: 24 Feb 2004
Posts: 732
Location: Germany

As the message says, the remote channel did not specify a CipherSpec.

Check the SSL setting of the channel on the QMgr and in MQMON. Have a look at the error logs. Maybe you specified the CipherSpec but they couldn't be loaded.

Remote channel means "the other side", so when you see this in MQMON, then look at the QMgr, when you see this on the QMgr, then look at the MQMON.
_________________
Regards
Hubert
Back to top
View user's profile Send private message Visit poster's website
bruce2359
PostPosted: Thu Jan 16, 2020 7:31 am Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 8615
Location: US: west coast, almost. Otherwise, enroute.

Did admins at both ends of the channel do a REFRESH SECURITY TYPE(SSL) following changes?
_________________
My life flows on in endless song;
How can I keep from singing?
Back to top
View user's profile Send private message
sarabennet
PostPosted: Thu Jan 16, 2020 8:00 am Post subject: Reply with quote

Novice

Joined: 23 Jun 2019
Posts: 12

Quote:
Check the SSL setting of the channel on the QMgr and in MQMON.


yes SSL setting is validated on both ends

Quote:
Did admins at both ends of the channel do a REFRESH SECURITY TYPE(SSL) following changes?


yes we did

There was a change at our end , we added a new signer, is it possible to update the signer details at MQMON end as well?
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Thu Jan 16, 2020 9:12 am Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20216
Location: LI,NY

sarabennet wrote:

There was a change at our end , we added a new signer, is it possible to update the signer details at MQMON end as well?

Sure, verify the value of the corresponding SSLKEYRING (from memory, adjust to the correct name) environment variable, and modify the corresponding key/trust store.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexGeneral IBM MQ SupportSSL error
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.