Posted: Mon Oct 31, 2016 5:18 am Post subject: Configuring Hermes JMS with MQ in SSL enabled environment
Newbie
Joined: 27 Sep 2013 Posts: 7
I am trying to connect my secure queue manager with Hermes JMS. But I am getting following error in MQ logs:
AMQ9639: Remote channel 'XXXXXX' did not specify a CipherSpec.
EXPLANATION:
Remote channel 'XXXXXX' did not specify a CipherSpec when the local
channel expected one to be specified.
The remote host is '192.168.43.221'.
The channel did not start.
ACTION:
Change the remote channel 'XXXXXX' on host 'XXXXXX' to specify a CipherSpec so that both ends of the channel have matching CipherSpecs.
Below are information of environment.
a) MQ Client: V7
b) MQ Server: V9
Following are values of properties related to Connection Factory.
1. SSLCertStoresAsString: path of jks file
2. SSLCipherSuit: SSL_RSA_WITH_AES_128_CBC_SHA256
3. SSLFipsRequired: true
on channel definition, Cipher Spec is "TLS_AES_128_CBC_SHA256"
Moreover, Hermes JMS has discovered objects without SSL.
So what did you make of my advice in the previous thread?
You may want your JNDI to be a file jndi and that should resolve most of your problems... Look into using a CCDT URL for the connection, this way all the properties are defined right for the channel. If you decide against a CCDT URL you will need to set the ciphersuite and fips properties on the connection factory.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum