Troubleshooting
Problem
This document is intended to help diagnose IBM MQ Server and Client TLS SSL setup errors.
It lists most of the common configuration errors that can cause an SSL connection to fail, and gives the course of action to resolve the problem.
In each case, the error can be diagnosed by a combination of the error seen in the IBM MQ system acting as the client's error logs and system acting as the server's error logs.
All cases here assume that 2-way authentication is being attempted (SSLCAUTH set to REQUIRED on the queue manager's SVRCONN channel). This is the default, and the errors are similar for 1-way authentication (SSLCAUTH set to OPTIONAL).
.
For IBM MQ Java/JMS troubleshooting this document is applicable:
It lists most of the common configuration errors that can cause an SSL connection to fail, and gives the course of action to resolve the problem.
In each case, the error can be diagnosed by a combination of the error seen in the IBM MQ system acting as the client's error logs and system acting as the server's error logs.
All cases here assume that 2-way authentication is being attempted (SSLCAUTH set to REQUIRED on the queue manager's SVRCONN channel). This is the default, and the errors are similar for 1-way authentication (SSLCAUTH set to OPTIONAL).
.
For IBM MQ Java/JMS troubleshooting this document is applicable:
https://www.ibm.com/support/pages/node/709225
Troubleshooting IBM MQ Java/JMS SSL TLS Configurations
Troubleshooting IBM MQ Java/JMS SSL TLS Configurations
Symptom
- Instructions on viewing error logs
- AMQ9616E: The CipherSpec '
’ proposed by remote host 'XXX.XXX.XXX.XXX' is not enabled. - AMQ9633E: Bad SSL certificate for channel '????'.
- AMQ9637E: Channel is lacking a certificate.
- AMQ9642E: No SSL or TLS certificate for channel '
'. - AMQ9660E: SSL key repository: password stash file absent or unusable.
- AMQ9663E: An invalid SSL certificate was received from the remote system.
- AMQ9665E: SSL connection closed by remote end of channel '
'. - AMQ9716E: Remote SSL certificate revocation status check failed for channel
Document Location
Worldwide
[{"Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"ARM Category":[{"code":"a8m0z00000008JwAAI","label":"Security-\u003ETLS (SSL)"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"},{"Product":{"code":"SSKM59","label":"IBM MQ for HPE NonStop"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}},{"Product":{"code":"SS5K6E","label":"IBM MQ Appliance"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
28 April 2025
UID
ibm16359069