1 Reply Latest reply on Jun 29, 2012 8:36 AM by Wolf-Dieter Fink

    How to configure Websphere MQ in JBoss AS 7 using SSL

    sbourguiba Newbie

      Hi all,


      I have configured Websphere MQ with Jboss7 successfully and i would like to secure the connection with SSL, i have started to create a truststore with IBM Key Management and i copied it under "D:\Program Files (x86)\IBM\WebSphere MQ\Qmgrs\QM01\ssl" and under configuration folder of my server and i have configured my QueueManager with this path in Websphere MQ Explorer, also i have configured my Channel with a NULL_MD5 CipherSpec.

      For Jboss configuration i have added this config property to the connection definition :

      <config-property name="sslCipherSuite">SSL_RSA_WITH_NULL_MD5</config-property>


      Now when i try to send a meesage to the queue, i have this exception:


      Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:808)

         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1120)

         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1147)

         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1131)

         at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:944)

         ... 76 more

      Caused by: java.io.EOFException: SSL peer shut down incorrectly

         at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:333)

         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:789)

         ... 80 more


      I know that there are other properties to configure, but i don't have any idea how to set there values:

      <config-property name="sslCertStores"> </config-property>

      <config-property name="sslFipsRequired"> </config-property>

      <config-property name="sslPeerName"> </config-property>

      <config-property name="sslResetCount"> </config-property>

      <config-property name="sslSocketFactory"> </config-property>