IBM Support

IT10388: WMQ V5.3.1: A CLIENT SIDE SSL CERTIFICATE IS BEING REQUIRED EVEN THOUGH THE REMOTE CHANNEL IS USING SSLCAUTH(OPTIONAL).

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Unexpectedly, when the receiving QMgr has their channel set with
    SSLCAUTH(OPTIONAL), the Nonstop QMgr at WMQ V5.3.1 insists on
    sending a certificate to identify itself.  The remote side,
    however, does not require one.
    

Local fix

  • 1) Create a self signed certificate for the Nonstop QMgr.
    2) Set up the self signed certificate against the remote QMgr.
    In other words, cert.pem, and add the self-signed certificate to
    the key database used by the remote QMgr.
    

Problem summary

  • The client (sender channel) checks for the existence of a
    cert.pem and stash file before ever communicating with the
    server (receiver chl) so is unaware of the SSLCAUTH setting
    

Problem conclusion

  • Mdify code to only attempt to read and load cert(s) and private
    key(s) if the cert and stash files exist
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT10388

  • Reported component name

    WEBS MQ NSS ITA

  • Reported component ID

    5724A3902

  • Reported release

    531

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-07-28

  • Closed date

    2015-12-17

  • Last modified date

    2015-12-17

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS MQ NSS ITA

  • Fixed component ID

    5724A3902

Applicable component levels

[{"Line of Business":{"code":"LOB36","label":"IBM Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFKSJ","label":"WebSphere MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3.1"}]

Document Information

Modified date:
17 November 2020