Relationship between Alias CipherSpec settings
The following tables show the expected behavior when TLS1.3 is not enabled on either the client, queue manager, or both and when TLS1.3 is enabled on both the client and queue manager.
The following tables show the relationship between different Alias CipherSpec settings and the
expected outcome. Table 1 shows the expected behavior when TLS 1.3 is not
enabled on either the client, server, or both. Table 2 shows the expected
behavior when TLS 1.3 is enabled on both the client and server. In both cases, the CipherSpecs for
the client are shown in the Y axis of the table, and the CipherSpecs for the server are shown in the
X axis of the table.
Note: Where the entry states Likely to fail this is because, if the
specific TLS 1.3 or TLS 1.2 CipherSpec used happens to be the CipherSpec that is strongest for the
client and queue manager, the TLS handshake resolves to using it, and so matches the channel SSCIPH
value.
| Server | ||||
|---|---|---|---|---|
| Client | Specific TLS 1.2 CipherSpec | ANY | ANY_ TLS12 | ANY_TLS12_ OR_HIGHER |
| Specific TLS 1.2 CipherSpec | Connects | Connects | Connects | Connects |
| ANY | Likely to fail | Connects | Connects | Connects |
| ANY_ TLS12 | Likely to fail | Connects | Connects | Connects |
| ANY_TLS12_ OR_HIGHER | Likely to fail | Connects | Connects | Connects |
| Server | |||||||
|---|---|---|---|---|---|---|---|
| Client | Specific TLS 1.2 CipherSpec | Specific TLS 1.3 CipherSpec | ANY | ANY_TLS12 | ANY_TLS13 | ANY_TLS12_ OR_HIGHER
|
ANY_TLS13_ OR_HIGHER
|
| Specific TLS 1.2 CipherSpec | Connects | Fails | Connects | Connects | Fails | Connects | Fails |
| Specific TLS 1.3 CipherSpec | Fails | Connects | Connects | Fails | Connects | Connects | Connects |
| ANY | Fails | Likely to fail | Connects | Fails | Connects | Connects | Connects |
| ANY_TLS12 | Likely to fail | Fails | Connects | Connects | Fails | Connects | Fails |
| ANY_TLS13 | Fails | Likely to fail | Connects | Fails | Connects | Connects | Connects |
| ANY_TLS12_ OR_HIGHER
|
Fails | Likely to fail | Connects | Fails | Connects | Connects | Connects |
| ANY_TLS13_ OR_HIGHER
|
Fails | Likely to fail | Connects | Fails | Connects | Connects | Connects |