IBM Support

IC60107: UNABLE TO USE THE WEBSPHERE MQ V7 EXPLORER TO CONNECT TO REMOTE QUEUE MANAGERS OVER SSL CHANNELS WITH A CCDT

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When attempting to perform remote administration of a queue
    manager using the WebSphere MQ Version 7 Explorer over SSL
    secured channels defined with a Client Channel Definition Table
    (CCDT), the Explorer fails to connect. A trace of the Explorer
    taken during the connection attempt shows the following error:
    
    Exception caught
    [idx=3]: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2397;AMQ9771:
    SSL handshake failed.
    javax.net.ssl.SSLHandshakeException[com.ibm.jsse2.util.h:
    PKIX path building failed:
    java.security.cert.CertPathBuilderException:
    unable to find valid certification path to requested target
    

Local fix

  • Do not use a CCDT and, instead, configure your SSL channel
    configuration directly in the Add Queue Manager wizard.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    This issue affects users of the WebSphere MQ V7 Explorer who
    administer remote queue managers, specifying the connection
    details in a CCDT and securing the connection with SSL.
    
    Platforms affected:
    Linux (Power),Linux (x86),Linux (x86-64),Linux (zSeries),
    Windows
    
    ****************************************************************
    PROBLEM SUMMARY:
    When the connection from the Explorer to the queue manager was
    created, some of the properties stored in the CCDT and the
    Explorer itself were not being passed correctly to the method
    doing the connect. This caused the SSL handshake to fail.
    

Problem conclusion

  • All properties defined in the CCDT and the Explorer are now
    correctly passed to the method creating the connection.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
                       v7.0
    Platform           Fix Pack 7.0.1.0
    --------           --------------------
    Windows            U200306
    Linux (x86)        U823664
    Linux (x86-64)     U823773
    Linux (zSeries)    U823668
    Linux (Power)      U823666
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available, information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC60107

  • Reported component name

    WMQ WINDOWS V7

  • Reported component ID

    5724H7220

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2009-02-23

  • Closed date

    2009-03-31

  • Last modified date

    2009-03-31

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ WINDOWS V7

  • Fixed component ID

    5724H7220

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCPQ63","label":"APAR \/ Maintenance"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
31 March 2009