ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General Discussion » SSL connection closed by remote end of channel

Post new topic  Reply to topic
 SSL connection closed by remote end of channel « View previous topic :: View next topic » 
Author Message
malapati
PostPosted: Thu Jun 11, 2009 6:57 pm    Post subject: SSL connection closed by remote end of channel Reply with quote

Newbie

Joined: 11 Jun 2009
Posts: 1

Hi There,
I am trying to set up the MQ-SSL environment. I created a queue managaer and client/server connection channels with SSL CIPHER set to TRIPLE_DES_SHA_US.Created a self signed certificate. My SSLKEYR is pointing to /var/mqm/qmgrs/QMGR_NAME/ssl/key

gsk6cmd -cert -list -db "/var/mqm/qmgrs/REALEC/ssl/key.kdb" -pw changeit

ibmwebspheremqrealec

I am trying to connect to the queue manager using the MQ explorer. Deployed the certificate to MQ explorer. When connected to the queue manager from MQ explorer, i am getting the following error. Please shed some light on this. I am kind of stuck here. Any help is greatly appreciated.


AMQ9665: SSL connection closed by remote end of channel '????'.

EXPLANATION:
The SSL connection was closed by the remote end of the channel during the SSL
handshake. The channel is '????'; in some cases its name cannot be determined
and so is shown as '????'. The channel did not start.
ACTION:
Check the remote end of the channel for SSL-related errors. Fix them and
restart the channel.
----- amqccisx.c : 1013 -------------------------------------------------------
06/11/09 21:18:41
AMQ9228: The TCP/IP responder program could not be started.

EXPLANATION:
An attempt was made to start an instance of the responder program, but the
program was rejected.
ACTION:
The failure could be because either the subsystem has not been started (in this
case you should start the subsystem), or there are too many programs waiting
(in this case you should try to start the responder program later). The reason
code was 0.
Back to top
View user's profile Send private message
gs
PostPosted: Wed Jun 17, 2009 12:58 am    Post subject: Reply with quote

Master

Joined: 31 May 2007
Posts: 254
Location: Sweden

Do you have the certificate (or root certificate) of the connecting part (MQ explorer) in the queue managers key store?

The only channel you need for client access in this case is a SVRCONN.
Did you read the relevant chapters in the manual. If yes, what does your channel definition and client keystore look like?
Back to top
View user's profile Send private message
shashivarungupta
PostPosted: Wed Jun 17, 2009 5:06 am    Post subject: Reply with quote

Grand Master

Joined: 24 Feb 2009
Posts: 1343
Location: Floating in space on a round rock.

04/27/09 08:38:56 - Process(413906.45378) User(mqm) Program(amqrmppa)
AMQ9665: SSL connection closed by remote end of channel 'XXXX.EAIXXSSL'.

EXPLANATION:
The SSL connection was closed by the remote end of the channel during the SSL
handshake. The channel is 'XXXX.EAIXXSSL'; in some cases its name cannot be
determined and so is shown as '????'. The channel did not start.

ACTION:
Check the remote end of the channel for SSL-related errors. Fix them and
restart the channel.


Few times I did notice the same error, and the explanation is there in itself. Please check the existence/ state of the channel.
Check the SSL certs/trust store/key store and cipher both at the client side settings and server side settings.

I agree with the post by 'gs'.
_________________
*Life will beat you down, you need to decide to fight back or leave it.
Back to top
View user's profile Send private message Send e-mail
Pavan Kumar PNV
PostPosted: Thu Jun 18, 2009 2:13 am    Post subject: Reply with quote

Acolyte

Joined: 03 Feb 2007
Posts: 66

Issue REFRESH SECURITY on that queue manager. I think that would solve your problem.
_________________
_____________
Pavan Pendyala
http://pavanz.blogspot.com
Back to top
View user's profile Send private message Visit poster's website Yahoo Messenger
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General Discussion » SSL connection closed by remote end of channel
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.