WebSphere MQ reports MQRC_UNSUPPORTED_CIPHER_SUITE with JBoss EAP

Solution Verified - Updated -

Environment

  • Red Hat JBoss Enterprise Application Platform (JBoss EAP)
    • 6
    • 7
  • WebSphere MQ

Issue

  • Specifying TLS_RSA_WITH_AES_128_CBC_SHA as the sslCipherSuite for MQ via the EAP adapter configuration properties
    <config-property name="sslCipherSuite">TLS_RSA_WITH_AES_128_CBC_SHA</config-property>
  • WebSphere MQ reports the following error when asked to create a managed connection
... com.ibm.mq.MQException: JMSCMQ0001: WebSphere MQ call failed with compcode '2' ('MQCC_FAILED') reason '2400' ('MQRC_UNSUPPORTED_CIPHER_SUITE').
        at com.ibm.msg.client.wmq.common.internal.Reason.createException(Reason.java:204)
        ...

Resolution

To use TLS based chipers in a non-IBM JDK, an upgrade of the WebSphere MQ release may be required to utilize the desired cipher suite.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments