Service Virtualization

Hi All,

I got the Cipher spec details from Mq team. And tried with following.

Cipher Spec Name: TLS_RSA_WITH_AES_256_CBC_SHA

Cipher suite Name: SSL_RSA_WITH_AES_256_CBC_SHA

MQ version: 7.0.1

But still i am facing the below exceptions.

Verifying Asset
Creating SSL Context with protocol: TLSv1.2
Initializing SSL Context
Error: Error opening queue manager MQM_SWIFT_TKD, Completion Code 2 (MQCC_FAILED), Reason Code 2393 (MQRC_SSL_INITIALIZATION_ERROR)

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2393;AMQ9204: Connection to host 'TK3DAPMTS01(1414)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2393;AMQ9771: SSL handshake failed. [1=java.lang.IllegalArgumentException[Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA],3=TK3DAPMTS01/10.153.9.126:1414

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2393;AMQ9771: SSL handshake failed. [1=java.lang.IllegalArgumentException[Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA],3=TK3DAPMTS01/10.153.9.126:1414 (TK3DAPMTS01),4=SSLSocket.createSocket,5=sun.security.ssl.SSLSocketFactoryImpl@6de46ce6

Caused by: java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA

Can anyone help me to get out of this issue?

Tahnks,

Suresh N

Completion Code 2 (MQCC_FAILED), Reason Code 2393 (MQRC_SSL_INITIALIZATION_ERROR)

This could be a typo from manually entering the Cipher Suite name.

This can also indicate that DevTest is using the wrong version of the MQ client jars. Double check your jar versions to be sure.

Please review the link for SSL configuration with IBM MQ:  

IBM MQ and SSL/TLS 

You don't have to start a new thread.  If it's time-sensitive or otherwise urgent then you should be contacting support.

As I said in your other thread:

> Caused by: java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA

This is covered in section 4.6 and subsequent sections.  The short version:

1. Make sure you don't have a typo in the cipher suite name.

2. Make sure you have the correct version of the MQ client jars.

3. If it's MQ v7.0.1.13 or later, then try this property in local.properties:

com.ibm.mq.cfg.useIBMCipherMappings=False

4. If all else fails, then you will have to find the IBM JRE JSSE jars and add them to DevTest's JRE.  Instructions for this are in section 4.6.1.

Are you using the JRE we delivery with DevTest, or using your own?