Hi Team,
I have a JAVA code within my application that connects to MQ . The connection uses SSL certificate with SSL_RSA_WITH_AES_256_CBC_SHA256 Chiper suit.
The issue is when I run this code from the Server which runs on Release 9.0.1FP8 HF199, The code runs perfectly and can connect to the MQ and send messages.
How ever when I run it from my local notes client which runs on Release 9.0.1FP9 SHF55 , I get the below error
03:36:42 [1521022002041] Thread: AgentThread: JavaAgent Class: SSLHelper creating SSL socket
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent Class: SSLHelper setting enabled cipher suites to ‘SSL_RSA_WITH_AES_256_CBC_SHA256’
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent Class: SSLHelper calling startHandshake
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent, Object: com.ibm.mq.MQException: MQJE001: An MQException occurred: Completion Code 2, Reason 2397
MQJE056: Initial negotiation failure ==> MQException constructor(cc, rc, source, msgid)() entry
MQJE001: An MQException occurred: Completion Code 2, Reason 2397
MQJE056: Initial negotiation failure
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent, Object: com.ibm.mq.MQException: MQJE001: An MQException occurred: Completion Code 2, Reason 2397
MQJE056: Initial negotiation failure <== MQException constructor() exit
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent <== SSLHelper::createSSLSocket() exit
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent Class: MQSESSIONClient MQException occurred whilst connecting
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent <== MQSESSIONClient::MQCONN() exit
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent, Object: com.ibm.mq.MQManagedConnectionJ11@11f811f8 <== MQManagedConnection constructor (via exception)() exit
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent, Object: com.ibm.mq.MQException: MQJE001: Completion Code 2, Reason 2397 ==> MQException constructor(cc, rc, source)() entry
MQJE001: Completion Code 2, Reason 2397
03:36:42 [1521022002447] Thread: AgentThread: JavaAgent, Object: com.ibm.mq.MQException: MQJE001: Completion Code 2, Reason 2397 <== MQException constructor() exit
My feeling is the issue is
- Either notes client does not support the ‘SSL_RSA_WITH_AES_256_CBC_SHA256’ cypher suits. (although I have the unrestricted policy file added in the jvm security folder)
2, The SSL hand shake is not happening.
I have the MQ Public key stored in a JKS that I had created. I have added it in cacers , my address book as well but no help same error comes.
I have written the same code in eclipses as a stand alone java program. It works fine,
Can you please advise and help ?
Thanks
Swarnava