MQSeries.net :: View topic

chandan · Posted: Tue Dec 04, 2012 12:55 pm Post subject:

Dear All,

The MQ SSL channels went on retrying state after hardware refresh on the server.Below are the details :

Earlier
-------

Server Type : Virtual Machine
CPUs : 8
CPU Model : Intel(R) Xeon(R) CPU L5520 @ 2.27GHz
Memory and Swap : 32 Gb and 32 Gb
Platform : OEL 5 Update 3
Bit : 32
Kernel : 2.6.18-128.4.1.0.1.el5PAE

Now
------

Server Type : Virtual Machine
CPUs : 16
CPU Model : Intel(R) Xeon(R) CPU E5-2660 0 @ 2.20GHz
Memory and Swap : "63 Gb and 31 Gb"
Platform : Oracle Enterprise Linux 5.5 32-Bit
Bit : 32
Kernel : 2.6.18-194.3.1.0.2.el5xen

Also,After hardware upgrade to bring up mqm services below steps were performed

Create soft link for /var/mqm/ to /dqnts2/mqm/var/mqm
Create soft link under /usr/lib to /opt/mqm/lib/

The MQ log for the error is below :

11/29/2012 03:56:50 AM - Process(26215.4156) User(mqm) Program(amqrmppa)
Host(ausodqnts10)
AMQ9620: Internal error on call to SSL function on channel 'TO.QMSBLP2.SSL'.

EXPLANATION:
An error indicating a software problem was returned from a function which is
used to provide SSL support. The error code returned was '701'. The function
call was 'gsk_attribute_set_enum - GSK_URI_CDP_DISABLE'. The channel is
'TO.QMSBLP2.SSL'; in some cases its name cannot be determined and so is shown
as '????'. The channel did not start.

-bash-3.2$ dspmqver

Name: WebSphere MQ
Version: 7.0.1.3
CMVC level: p701-103-100813
BuildType: IKAP - (Production)

-bash-3.2$ gsk7cmd -version
KJNI
============
@(#)CompanyName: IBM Corporation
@(#)LegalTrademarks: IBM
@(#)FileDescription: IBM Global Security Toolkit
@(#)FileVersion: 7.0.3.3
@(#)InternalName: gskkjni
@(#)LegalCopyright: Licensed Materials - Property of IBM GSKit
(C) Copyright IBM Corp.1995, 2003
All Rights Reserved. US Government Users
Restricted Rights - Use, duplication or disclosure
restricted by GSA ADP Schedule Contract with IBM Corp.
@(#)OriginalFilename: libgsk7kjni.so
@(#)ProductName: gsk7c (GoldCoast Build) 0405311550
@(#)ProductVersion: 7.0.3.3
@(#)ProductInfo: 04/05/17.20:27:03.04/05/31.15:59:17
@(#)CMVCInfo: gsk7c_040519/gsk7c_ikm gsk7c_040510/gsk7c_pkg gsk7c_040526/gsk7c_ssl gsk7c_040511/gsk7c_support gsk7c_040511/gsk7c_cms

It is a clustered environment and we have non-SSL channels working fine and taking the traffic.

Any help will be appreciated.

Thanks,
Chandan