SSL connects to MQ using .net mq SSLV3 client?

I am currently having a problem connecting to the server due to the following problem:

When I tried to connect to the server, it returned an error: MQRC_SSL_INITIALIZATION_ERROR

After a more thorough analysis through WireShark, I found that the Client is trying to connect to the server using SSL v2 , while the server can only accept SSL V3 , thereby rejecting the connection.

I checked the document, but I can not find any information about which version of SSL the .Net client supports.

I would like to check if the SSL version is controlled from the .Net MQ client, and if so, how can we configure it to connect via SSL v3?

Thanks.

+1
source share
1 answer

I am not sure I agree with your conclusion, as WMQ supported SSL V3.0 and TLS V1.0 since at least V6.0 and, possibly, earlier. It is rather a configuration mismatch between the client and server. The recommended procedure for resolving SSL / TLS problems is as follows:

My method for debugging SSL connections in WMQ should go through the following sequence so that each step works before moving on to the next:

  • Get a channel without SSL. This confirms that the channel names are spelled correctly, that there is a QMgr listener between the endpoints, and that the client points to the right port. You would be surprised how many times someone incorrectly enters a port or channel name.
  • , SVRCONN, SSLCAUTH(OPTIONAL). SSL-, , . QMgr , . , QMgr QMgr. (: QMgr , , . , , . . !)
  • SVRCONN SSLCAUTH(REQUIRED). , ( ) . , QMgr .
  • SSLPEER CHLAUTH, , .

№ 2 №3 SSL . , . .

UPDATE
. , SSL/TLS. , . - , . . ( CA) . . , Java JMS JSSE , . Java JMS , .

WebSphere MQ, Java, . kdb, CMS, , KDB. " " . .Net SSL MQEnviornment.

SSL/TLS . , , , . , , ( -), , . , , , , .

2, , . QMgr . QMgr , AMQERR01.LOG. QMgr, 2!

QMgr , , , . , , . , , , .kdb. , QMgr [keystorename].kdb.kdb, . , , . -Java- WMQ , ibmwebspheremq, . , TRob, ibmwebspheremqtrob. , .

Windows, MQ . , WMQ .

+6

Source: https://habr.com/ru/post/1606699/


All Articles