Lightstream jms extender with IBM MQ

[DarioCrivelli]

Thank you for the update and the feedback.

[klevi]

Hi together, unfortunately it is still not possible to estasblish a certificate based connection to IBM MQ:

Caused by: com.ibm.mq.jmqi.JmqiException: CC=2;RC=2397;AMQ9204: Connection to host 'P2012-A9090.tcb.xxx.de(1541)' rejected. [1=com.ibm.mq.jmqi.JmqiException[CC=2;RC=2397;AMQ9641: Remote CipherSpec error for channel 'P1.FT.PMS.xxx' to host ''. [3=P1.FT.PMS.INPFRADMD1]],3=P2012-A9090.tcb.xxx.de(1541),5=RemoteConnection.analyseE rrorSegment]

Is there any possibility to pass the correct cipher suite as connection parameter or something similar? The server side is expecting TLS_RSA_WITH_AES_256_CBC_SHA256.

Right now this cipher suite value is only mentioned in our java.security file (parameter: jdk.tls.legacyAlgorithms), but this does not seem to be enough.

Thanks and best regards,
klevi

[DarioCrivelli]

Sorry, but we are not familiar with these details. The connection should be entirely managed by the IBM MQ client library (with the help of the JDK).
As far as we know, TLS_RSA_WITH_AES_256_CBC_SHA256 is among the cipher suites currently enabled by Java, still in Java 17.
Can you see other Java clients that connect successfully?

BTW, your previous problem was about the certification path.
This new problem seems a step backward, because the cipher suites are negotiated before.
What evidence do you have that the issue is that the TLS_RSA_WITH_AES_256_CBC_SHA256 cipher suite is missing on the client side?