MQSeries.net :: View topic - 2393 on ssl connection after 5.3 to 6.0 upgrade

mhubbard · Posted: Thu May 08, 2008 5:43 am Post subject:

Hello - it's been a while....
I am running v6.0 MQ servers on Red Hat and I have many clients that are currently connecting over SSL channels but are still using the 5.3 client. I am now working to upgrade the OS and MQ version on these clients. The new OS will be Red Hat Enterprise 5 with MQ 6.0 and I also have the 6.0.2.3 fix pack. I have carefully recompiled my client program with gcc 3.2. I am hoping....praying...that I will be able to use both the channel table and certificate key store that alre already on the client boxes. However, when attempting to do so, I am getting a 2393 error.

In /var/mqm/errors/AMQERR01.LOG, I see
05/08/08 08:17:43 - Process(27764.1) User(root) Program(iRCMSMQRcvd)
AMQ9661: Bad SSL data from peer on channel 'CHANNELSSL1'.

EXPLANATION:
An SSL channel has stopped because bad SSL data was received from the remote
end of the channel. More detail on the nature of the corruption can be found
from the GSKit return value of 410 (the GSKit return values are documented in
the MQ manuals). The channel is 'CHANNELSSL1'; in some cases its name cannot be
determined and so is shown as '????'.
ACTION:
Ensure you are connecting to a version of MQ which supports SSL at the remote
end of the channel. Check your network between the two ends of the channel, and
consider whether any possible causes of message corruption could be present.
Fix any problems which may exist and restart the channel.

The 410 Code simply says : SSL message format is incorrect.

Has anyone gone through this upgrade before and experienced this? Any general ideas?

Many thanks -
_________________
Michael J. Hubbard