1 Reply Latest reply: Jun 29, 2012 8:35 AM by Wolf-Dieter Fink RSS

How to configure Websphere MQ in JBoss AS 7 using SSL

sbourguiba Newbie

Hi all,

 

I have configured Websphere MQ with Jboss7 successfully and i would like to secure the connection with SSL, i have started to create a truststore with IBM Key Management and i copied it under "D:\Program Files (x86)\IBM\WebSphere MQ\Qmgrs\QM01\ssl" and under configuration folder of my server and i have configured my QueueManager with this path in Websphere MQ Explorer, also i have configured my Channel with a NULL_MD5 CipherSpec.

For Jboss configuration i have added this config property to the connection definition :

<config-property name="sslCipherSuite">SSL_RSA_WITH_NULL_MD5</config-property>

 

Now when i try to send a meesage to the queue, i have this exception:

 

Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

   at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:808)

   at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1120)

   at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1147)

   at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1131)

   at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:944)

   ... 76 more

Caused by: java.io.EOFException: SSL peer shut down incorrectly

   at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:333)

   at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:789)

   ... 80 more

 

I know that there are other properties to configure, but i don't have any idea how to set there values:

<config-property name="sslCertStores"> </config-property>

<config-property name="sslFipsRequired"> </config-property>

<config-property name="sslPeerName"> </config-property>

<config-property name="sslResetCount"> </config-property>

<config-property name="sslSocketFactory"> </config-property>

 

Regars,