Fixes are available
APAR status
Closed as program error.
Error description
When attempting to perform remote administration of a queue manager using the WebSphere MQ Version 7 Explorer over SSL secured channels defined with a Client Channel Definition Table (CCDT), the Explorer fails to connect. A trace of the Explorer taken during the connection attempt shows the following error: Exception caught [idx=3]: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2397;AMQ9771: SSL handshake failed. javax.net.ssl.SSLHandshakeException[com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
Local fix
Do not use a CCDT and, instead, configure your SSL channel configuration directly in the Add Queue Manager wizard.
Problem summary
**************************************************************** USERS AFFECTED: This issue affects users of the WebSphere MQ V7 Explorer who administer remote queue managers, specifying the connection details in a CCDT and securing the connection with SSL. Platforms affected: Linux (Power),Linux (x86),Linux (x86-64),Linux (zSeries), Windows **************************************************************** PROBLEM SUMMARY: When the connection from the Explorer to the queue manager was created, some of the properties stored in the CCDT and the Explorer itself were not being passed correctly to the method doing the connect. This caused the SSL handshake to fail.
Problem conclusion
All properties defined in the CCDT and the Explorer are now correctly passed to the method creating the connection. --------------------------------------------------------------- The fix is targeted for delivery in the following PTFs: v7.0 Platform Fix Pack 7.0.1.0 -------- -------------------- Windows U200306 Linux (x86) U823664 Linux (x86-64) U823773 Linux (zSeries) U823668 Linux (Power) U823666 The latest available maintenance can be obtained from 'WebSphere MQ Recommended Fixes' http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037 If the maintenance level is not yet available, information on its planned availability can be found in 'WebSphere MQ Planned Maintenance Release Dates' http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309 ---------------------------------------------------------------
Temporary fix
Comments
APAR Information
APAR number
IC60107
Reported component name
WMQ WINDOWS V7
Reported component ID
5724H7220
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-02-23
Closed date
2009-03-31
Last modified date
2009-03-31
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WMQ WINDOWS V7
Fixed component ID
5724H7220
Applicable component levels
R700 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSDEZSF","label":"IBM WebSphere MQ Managed File Transfer for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
31 March 2023