IBM Support

SE63551: THE MQCERTCK UTILITY FAILS TO DETECT CERTIFICATES SPECIFIED IN CHANNEL CERTLABL ATTRIBUTES WHEN RUN ON IBM MQ FOR IBM I

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When using the mqcertck utility on IBM i to validate the TLS
    configuration of an IBM MQ queue manager, the utility does not
    check the validity of any certificates specified using the
    CERTLABL attribute of a channel definition.
    Accordingly, this means that mqcertck does not report an error
    if an invalid certificate has been specified in the CERTLABL
    attribute of a channel definition.
    

Local fix

  • There is no local fix or workaround as the problem is due to
    missing functionality.
    
    The only way to detect an error in the channel certlabl values
    would be manually.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Users attempting to use mqcertck to verify their SSL
    configuration on an iSeries Queue Manager which has certificate
    labels configured on channels.
    
    
    Platforms affected:
    IBM iSeries
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    This error was caused by an incomplete implementation of the
    channel certificate checking code on iSeries.
    

Problem conclusion

  • This error was caused by an incomplete implementation of the
    channel certificate checking code on iSeries.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v8.0       8.0.0.5
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    SE63551

  • Reported component name

    WMQ ISERIES V8.

  • Reported component ID

    5724H7254

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-12-16

  • Closed date

    2016-03-04

  • Last modified date

    2016-03-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ ISERIES V8.

  • Fixed component ID

    5724H7254

Applicable component levels

  • R800 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
04 March 2016