代码之家  ›  专栏  ›  技术社区  ›  Anil Bhaskaran

带有MQIPT和tomcat docker的单向SSL

  •  1
  • Anil Bhaskaran  · 技术社区  · 7 年前

    我正在尝试连接到启用了单向SSL的MQIPT。下面是我的spring配置

    <bean id="connectionFactory"
            class="org.springframework.jms.connection.SingleConnectionFactory">
            <property name="targetConnectionFactory">
                <ref bean="mqQueueConnectionFactory" />
            </property>
        </bean>
        <bean id="mqQueueConnectionFactory" class="com.ibm.mq.jms.MQQueueConnectionFactory">
            <property name="hostName" value="xx.xx.xx.xx" />
            <property name="port" value="xxxx" />
            <property name="queueManager" value="QM" />
            <property name="transportType" value="1" />
            <property name="channel" value="SSL.CHNL" />
            <property name="SSLCipherSuite" value="SSL_RSA_WITH_AES_256_CBC_SHA"/>
        </bean>
        <bean id="destination" class="com.ibm.mq.jms.MQQueue">
            <constructor-arg value="SANDBOX_Q" />
            <property name="baseQueueManagerName">
                <value>QM</value>
            </property>
            <property name="baseQueueName">
                <value>QUEUE</value>
            </property>
        </bean>
    

    MQ Exception:: Uncategorized exception occured during JMS processing; nested exception is com.ibm.msg.client.jms.DetailedJMSException: JMSWMQ0018: Failed to connect to queue manager 'QM' with connection mode 'Client' and host name 'null'. .... Caused by: com.ibm.mq.MQException: JMSCMQ0001: WebSphere MQ call failed with compcode '2' ('MQCC_FAILED') reason '2400' ('MQRC_UNSUPPORTED_CIPHER_SUITE').
    

    我正在使用JDK 8和MQ客户端jars版本8。

    1 回复  |  直到 7 年前
        1
  •  1
  •   JoshMc    7 年前

    SSL/TLS CipherSpecs and CipherSuites in IBM MQ classes for JMS "

    CipherSpec                  |Equivalent CipherSuite (IBM JRE)|Equivalent CipherSuite (Oracle JRE)
    -------------------------------------------------------------------------------------------------
    TLS_RSA_WITH_AES_256_CBC_SHA|  SSL_RSA_WITH_AES_256_CBC_SHA  |TLS_RSA_WITH_AES_256_CBC_SHA
    

    SSL_RSA_WITH_AES_256_CBC_SHA ,这意味着队列管理器上的SVRCONN通道应该指定 TLS_RSA_WITH_AES_256_CBC_SHA -Dcom.ibm.mq.cfg.useIBMCipherMappings=false 应指定 TLS\u RSA\u WITH\u AES\u 256\u CBC\u SHA

    <property name="SSLCipherSuite" value="TLS_RSA_WITH_AES_256_CBC_SHA"/>