on 02-15-2018 9:37 PM
We are implementing SSL between a JMS channel and websphere MQ, we set the cipher on MQ to: TLS_RSA_WITH_AES_128_CBC_SHA and this setting is also set on the PI JMS channel according to note 1869690.
After a channel restart we check the communication channel monitoring tab, we get error 2393 MQRC_SSL_INITIALIZATION_ERROR.(we also set on PI the option”other” on SSL field, and manually write the cipher, getting the MQRC_UNSUPPORTED_CIPHER error message )
Also on the trustedCAs keystore is uploaded the MQ queue manager certificate, and I also share the PI certificate to MQ team.
Working on SAP PI 7.40 dual stack.
Am I missing something?
Thanks.
Hello,
CipherSpec TLS_RSA_WITH_AES_128_CBC_SHA you used is mapped to SSL_RSA_WITH_AES_128_CBC_SHA, which is not supported by Oracle JSSE.
SSL_RSA_WITH_AES_256_CBC_SHA is only recognized by IBM runtime environment due to their internal mapping in MQ client code. Please refer SAP Note 2218025 and perform the changes in Solution part accordingly.
Best Regards,
Faison
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Louis,
How did you resolve this? I am facing exactly the same issue.
TIA.
Regards,
Vivek Jain
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
84 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.