Service Virtualization

Expand all | Collapse all

SSL Connectivity issue due to MQRC_UNSUPPORTED_CIPHER_SUITE

  • 1.  SSL Connectivity issue due to MQRC_UNSUPPORTED_CIPHER_SUITE

    Posted Aug 04, 2017 12:58 PM

    I am trying to connect with MQ queues which requires SSL connectivity using the cipher suite: SSL_RSA_WITH_AES_256_CBC_SHA256.

     

     

    I followed all the steps given at the following link:

    IBM MQ and SSL/TLS 

     

    After following all the steps also I am receiving the following error:

     

    Exception:

    ============================================================================

    | Message:     Error opening queue manager , Completion Code 2 (MQCC_FAILED), Reason Code 2400 (MQRC_UNSUPPORTED_CIPHER_SUITE)

    ----------------------------------------------------------------------------

    | Trapped Exception: MQJE001: Completion Code '2', Reason '2400'.



  • 2.  Re: SSL Connectivity issue due to MQRC_UNSUPPORTED_CIPHER_SUITE

    Broadcom Employee
    Posted Aug 04, 2017 01:52 PM

    What version of MQ Manager are you connecting to?



  • 3.  Re: SSL Connectivity issue due to MQRC_UNSUPPORTED_CIPHER_SUITE

    Posted Aug 04, 2017 06:16 PM

    Version: 7.5.0.5



  • 4.  Re: SSL Connectivity issue due to MQRC_UNSUPPORTED_CIPHER_SUITE

    Posted Aug 04, 2017 06:18 PM

    MQ Version: 7.5.0.5



  • 5.  Re: SSL Connectivity issue due to MQRC_UNSUPPORTED_CIPHER_SUITE
    Best Answer

    Posted Aug 21, 2017 04:53 PM

    Naheed,

     

    Have you had the chance to look at this part of the document:

    Unsupported Cipher Suite

     

    Completion Code 2 (MQCC_FAILED), Reason Code 2400 (MQRC_UNSUPPORTED_CIPHER_SUITE)

     

    Completion Code 2 (MQCC_FAILED), Reason Code 2393 (MQRC_SSL_INITIALIZATION_ERROR)

     

    This could be a typo from manually entering the Cipher Suite name.

     

    This can also indicate that DevTest is using the wrong version of the MQ client jars.  Double check your jar versions to be sure.

     

    If you have one of the following versions or later of the MQ client jars then you may be able to work around this with a system property:

    • 7.0.1.13+
    • 7.1.0.7+
    • 7.5.0.5+
    • 8.0.0.2+

    Try putting this line in local.properties:

    com.ibm.mq.cfg.useIBMCipherMappings=False

     

    If all else fails then this could be a real Cipher Suite that is legitimately not supported by the Oracle JRE.  Some of the Cipher Suites mentioned in the table above in section 1.2 fall into this category.

     

    This is solvable, but it involves actually copying the IBM JRE's JSSE provider into your DevTest JRE.

     

    Hope it helps,

    Heloisa