Talend IBM Websphere MQ connection using SSL

Five Stars

Talend IBM Websphere MQ connection using SSL

Hi Team,


We are using Talend 6.3.1 DI and trying to connect to Websphere MQ hosted on Mainframe (IBM MQ for z/OS V9.0.0)

 

While making connection to MQ we are getting following message "

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2393;AMQ9204: Connection to host 'XXXX.XX.XXXX.com(XXXX)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2393;AMQ9771: SSL handshake failed. [1=java.lang.IllegalArgumentException[Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA]

 

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2393;AMQ9771: SSL handshake failed. [1=java.lang.IllegalArgumentException[Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA]"

 

We checked with MQ admin and it does support this Ciphersuite. in fact we are able to connect to MQ using standalone JAVA program so no issue with JDK policy files as well. 

We checked adding parameter for protocol but no luck. with parameter 

-Dcom.ibm.mq.cfg.useIBMCipherMappings=false job is failing with error code 2400. 

 

Anybody faced this issue earlier? 


Accepted Solutions
Five Stars

Re: Talend IBM Websphere MQ connection using SSL

Thanks I got a patch for this issue. 


All Replies
Moderator

Re: Talend IBM Websphere MQ connection using SSL

Hello,

Here exists a jira issue on talend bug tracker  and all development steps are done for it.

Have you already created a case on talend support portal? In this way, our colleagues from support team will give you a patch if need be.

Best regards

Sabrina

 

--
Don't forget to give kudos when a reply is helpful and click Accept the solution when you think you're good with it.
Five Stars

Re: Talend IBM Websphere MQ connection using SSL

Thanks I got a patch for this issue. 

Moderator

Re: Talend IBM Websphere MQ connection using SSL

Hello,

Thanks for your update and feel free to let us know if there is any further help we can give.

Best regards

Sabrina

--
Don't forget to give kudos when a reply is helpful and click Accept the solution when you think you're good with it.
Four Stars

Re: Talend IBM Websphere MQ connection using SSL

Hi Team,


We are using Talend 6.1.1 DI and trying to connect to Websphere MQ:

While making connection to MQ we are getting following message

[FATAL]: tMomConnection_1 MQJE001: Completion Code '2', Reason '2393'.
[statistics] disconnected
Exception in component tMomConnection_1
com.ibm.mq.MQException: MQJE001: Completion Code '2', Reason '2393'.
at com.ibm.mq.MQManagedConnectionJ11.<init>(MQManagedConnectionJ11.java:248)
at com.ibm.mq.MQClientManagedConnectionFactoryJ11._createManagedConnection(MQClientManagedConnectionFactoryJ11.java:447)
at com.ibm.mq.MQClientManagedConnectionFactoryJ11.createManagedConnection(MQClientManagedConnectionFactoryJ11.java:483)
at com.ibm.mq.StoredManagedConnection.<init>(StoredManagedConnection.java:96)
at com.ibm.mq.MQSimpleConnectionManager.allocateConnection(MQSimpleConnectionManager.java:194)
at com.ibm.mq.MQQueueManagerFactory.obtainBaseMQQueueManager(MQQueueManagerFactory.java:758)
at com.ibm.mq.MQQueueManagerFactory.procure(MQQueueManagerFactory.java:706)
at com.ibm.mq.MQQueueManagerFactory.constructQueueManager(MQQueueManagerFactory.java:670)
at com.ibm.mq.MQQueueManagerFactory.createQueueManager(MQQueueManagerFactory.java:145)
at com.ibm.mq.MQQueueManager.<init>(MQQueueManager.java:752)
at cods_contact.testt_0_1.TESTT.tMomConnection_1Process(TESTT.java:1229)
at cods_contact.testt_0_1.TESTT.tSetKeystore_1Process(TESTT.java:1079)
at cods_contact.testt_0_1.TESTT.tLibraryLoad_6Process(TESTT.java:741)
at cods_contact.testt_0_1.TESTT.tPrejob_1Process(TESTT.java:1437)
at cods_contact.testt_0_1.TESTT.runJobInTOS(TESTT.java:1838)
at cods_contact.testt_0_1.TESTT.main(TESTT.java:1544)
Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2393;AMQ9204: Connection to host 'XXX.XXX.com(8101)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2393;AMQ9771: SSL handshake failed. [1=java.lang.IllegalArgumentException[Unsupported ciphersuite SSL_RSA_WITH_AES_128_CBC_SHA],3=XXX.XXX.com/10.1.4.27:8101 (XXX.XXX.com),4=SSLSocket.createSocket,5=default]],3=XXX.XXX.com(8101),5=RemoteTCPConnection.makeSocketSecure]
at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:2450)
at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:1396)
at com.ibm.mq.ese.jmqi.InterceptedJmqiImpl.jmqiConnect(InterceptedJmqiImpl.java:376)
at com.ibm.mq.ese.jmqi.ESEJMQI.jmqiConnect(ESEJMQI.java:561)
at com.ibm.mq.MQSESSION.MQCONNX_j(MQSESSION.java:914)
at com.ibm.mq.MQManagedConnectionJ11.<init>(MQManagedConnectionJ11.java:234)
... 15 more
Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2393;AMQ9771: SSL handshake failed. [1=java.lang.IllegalArgumentException[Unsupported ciphersuite SSL_RSA_WITH_AES_128_CBC_SHA],3=XXX.XXX.com/10.1.4.27:8101 (XXX.XXX.com),4=SSLSocket.createSocket,5=default]
at com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.makeSocketSecure(RemoteTCPConnection.java:1915)
at com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.connnectUsingLocalAddress(RemoteTCPConnection.java:801)
at com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:1125)
at com.ibm.mq.jmqi.remote.impl.RemoteConnection.connect(RemoteConnection.java:835)
at com.ibm.mq.jmqi.remote.impl.RemoteConnectionSpecification.getSessionFromNewConnection(RemoteConnectionSpecification.java:409)
at com.ibm.mq.jmqi.remote.impl.RemoteConnectionSpecification.getSession(RemoteConnectionSpecification.java:305)
at com.ibm.mq.jmqi.remote.impl.RemoteConnectionPool.getSession(RemoteConnectionPool.java:146)
at com.ibm.mq.jmqi.remote.api.RemoteFAP.jmqiConnect(RemoteFAP.java:1868)
... 20 more
Caused by: java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_AES_128_CBC_SHA
at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:237)
at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteList.java:82)
at sun.security.ssl.SSLSocketImpl.setEnabledCipherSuites(SSLSocketImpl.java:2461)
at com.ibm.mq.jmqi.remote.impl.RemoteTCPConnection.makeSocketSecure(RemoteTCPConnection.java:1907)

 

 

We checked with MQ admin and it does support this Ciphersuite. 

We checked adding parameter for protocol but no luck. with parameter 

-Dcom.ibm.mq.cfg.useIBMCipherMappings=false job is failing with error code 2393. 

 

Can you help me please? 

Moderator

Re: Talend IBM Websphere MQ connection using SSL

Hello,

Are you using subscription soulution? Could you please create a case on talend support portal?

Best regards

Sabrina

--
Don't forget to give kudos when a reply is helpful and click Accept the solution when you think you're good with it.
Four Stars

Re: Talend IBM Websphere MQ connection using SSL

Hi,

Thank you for thr replay...

How i can do that? it's nit possible to have a quick response here?

 

Thanks

Moderator

Re: Talend IBM Websphere MQ connection using SSL

Hello,

With regard to your issue, it's not allowed to deliver a patch to you directly on talend forum.

Please login talend support portal with your credential.

https://login.talend.com/support-login.php

Best regards

Sabrina

 

--
Don't forget to give kudos when a reply is helpful and click Accept the solution when you think you're good with it.