Hi

------------------------------
Vinay kumar
------------------------------

There will be no errors on the queue manager side because your connection has not made it that far.

In order for us to help you, I think you will have to tell us a little more about your SSL set up on the client side. Clearly there is something amiss there, but to tell you what it is, you will first need to tell us what you have done.

Cheers,
Morag

------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited
------------------------------

Thanks for reply . 

I am part of MQ team only and  application want to perform both SSL/LDAP authentication as part of SWIFT new policies . 

I have implemented LDAP authentication on queue manager and which is successful . When application trying to make connections from their server they are getting above error . 

This is MQ config which they use on their code .

//*
Hostname(''blahblah");
port(1416);
TransportType(JMSC.MQJMS_TP_CLIENT_MQ_TCPIP);
QueueManager("TEST")
SSLCIPHERSUITE("TLS_RSA_WITH_AES_128_CBC_SHA");
Channel("blah")
Queue("BlahBlah");

*//

They create a jar file and running from their server as follows and they have updated certs on their server .

command will be something like this :

java -classpath "jar file " -Djdk.tls.client.protocols="TLSv1" -Djavax.net.ssl.keyStore=directory -Djavax.net.ssl.keyStorePassword=blah -Djavax.net.ssl.trustStore=directory -Djavax.net.ssl.trustStorePassword=blah file


------------------------------
Vinay kumar
------------------------------

For use of that cipher spec do you have the unrestricted policy files are applied to the JRE ?

Also what level of JRE are you using?

------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited
------------------------------

Original Message:
Sent: 05-31-2018 07:16
From: Vinay kumar
Subject: MQJE013:Error accessing socket streams.

Thanks for reply .

I am part of MQ team only and  application want to perform both SSL/LDAP authentication as part of SWIFT new policies .

I have implemented LDAP authentication on queue manager and which is successful . When application trying to make connections from their server they are getting above error .

This is MQ config which they use on their code .

//*
Hostname(''blahblah");
port(1416);
TransportType(JMSC.MQJMS_TP_CLIENT_MQ_TCPIP);
QueueManager("TEST")
SSLCIPHERSUITE("TLS_RSA_WITH_AES_128_CBC_SHA");
Channel("blah")
Queue("BlahBlah");

*//

They create a jar file and running from their server as follows and they have updated certs on their server .

command will be something like this :

java -classpath "jar file " -Djdk.tls.client.protocols="TLSv1" -Djavax.net.ssl.keyStore=directory -Djavax.net.ssl.keyStorePassword=blah -Djavax.net.ssl.trustStore=directory -Djavax.net.ssl.trustStorePassword=blah file


------------------------------
Vinay kumar
------------------------------

jre1.8.0_65
yes the unrestricted policy fiels are part of jre .

------------------------------
Vinay kumar
------------------------------

Original Message:
Sent: 05-31-2018 07:59
From: Morag Hughson
Subject: MQJE013:Error accessing socket streams.

For use of that cipher spec do you have the unrestricted policy files are applied to the JRE ?

Also what level of JRE are you using?

------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited
------------------------------


Original Message:
Sent: 05-31-2018 07:16
From: Vinay kumar
Subject: MQJE013:Error accessing socket streams.

Thanks for reply .

I am part of MQ team only and  application want to perform both SSL/LDAP authentication as part of SWIFT new policies .

I have implemented LDAP authentication on queue manager and which is successful . When application trying to make connections from their server they are getting above error .

This is MQ config which they use on their code .

//*
Hostname(''blahblah");
port(1416);
TransportType(JMSC.MQJMS_TP_CLIENT_MQ_TCPIP);
QueueManager("TEST")
SSLCIPHERSUITE("TLS_RSA_WITH_AES_128_CBC_SHA");
Channel("blah")
Queue("BlahBlah");

*//

They create a jar file and running from their server as follows and they have updated certs on their server .

command will be something like this :

java -classpath "jar file " -Djdk.tls.client.protocols="TLSv1" -Djavax.net.ssl.keyStore=directory -Djavax.net.ssl.keyStorePassword=blah -Djavax.net.ssl.trustStore=directory -Djavax.net.ssl.trustStorePassword=blah file


------------------------------
Vinay kumar

I do not use this parameter when I run SSL clients:-

-Djdk.tls.client.protocols="TLSv1"

What happens if you try without setting the default protocol in this way, i.e. remove this parameter completely?

------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited
------------------------------

Original Message:
Sent: 05-31-2018 10:21
From: Vinay kumar
Subject: MQJE013:Error accessing socket streams.

jre1.8.0_65
yes the unrestricted policy fiels are part of jre .

------------------------------
Vinay kumar
------------------------------


Original Message:
Sent: 05-31-2018 07:59
From: Morag Hughson
Subject: MQJE013:Error accessing socket streams.

For use of that cipher spec do you have the unrestricted policy files are applied to the JRE ?

Also what level of JRE are you using?

------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited


Original Message:
Sent: 05-31-2018 07:16
From: Vinay kumar
Subject: MQJE013:Error accessing socket streams.

Thanks for reply .

I am part of MQ team only and  application want to perform both SSL/LDAP authentication as part of SWIFT new policies .

I have implemented LDAP authentication on queue manager and which is successful . When application trying to make connections from their server they are getting above error .

This is MQ config which they use on their code .

//*
Hostname(''blahblah");
port(1416);
TransportType(JMSC.MQJMS_TP_CLIENT_MQ_TCPIP);
QueueManager("TEST")
SSLCIPHERSUITE("TLS_RSA_WITH_AES_128_CBC_SHA");
Channel("blah")
Queue("BlahBlah");

*//

They create a jar file and running from their server as follows and they have updated certs on their server .

command will be something like this :

java -classpath "jar file " -Djdk.tls.client.protocols="TLSv1" -Djavax.net.ssl.keyStore=directory -Djavax.net.ssl.keyStorePassword=blah -Djavax.net.ssl.trustStore=directory -Djavax.net.ssl.trustStorePassword=blah file


------------------------------
Vinay kumar

After removing this parameter and run with debug option it provided error logs and issue is with jks which app is using .

Thanks for help . 

Regards

Vinay Kumar

------------------------------
Vinay kumar
------------------------------

Original Message:
Sent: 05-31-2018 19:49
From: Morag Hughson
Subject: MQJE013:Error accessing socket streams.

I do not use this parameter when I run SSL clients:-

-Djdk.tls.client.protocols="TLSv1"

What happens if you try without setting the default protocol in this way, i.e. remove this parameter completely?

------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited
------------------------------


Original Message:
Sent: 05-31-2018 10:21
From: Vinay kumar
Subject: MQJE013:Error accessing socket streams.

jre1.8.0_65
yes the unrestricted policy fiels are part of jre .

------------------------------
Vinay kumar


Original Message:
Sent: 05-31-2018 07:59
From: Morag Hughson
Subject: MQJE013:Error accessing socket streams.

For use of that cipher spec do you have the unrestricted policy files are applied to the JRE ?

Also what level of JRE are you using?

------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited


Original Message:
Sent: 05-31-2018 07:16
From: Vinay kumar
Subject: MQJE013:Error accessing socket streams.

Thanks for reply .

I am part of MQ team only and  application want to perform both SSL/LDAP authentication as part of SWIFT new policies .

I have implemented LDAP authentication on queue manager and which is successful . When application trying to make connections from their server they are getting above error .

This is MQ config which they use on their code .

//*
Hostname(''blahblah");
port(1416);
TransportType(JMSC.MQJMS_TP_CLIENT_MQ_TCPIP);
QueueManager("TEST")
SSLCIPHERSUITE("TLS_RSA_WITH_AES_128_CBC_SHA");
Channel("blah")
Queue("BlahBlah");

*//

They create a jar file and running from their server as follows and they have updated certs on their server .

command will be something like this :

java -classpath "jar file " -Djdk.tls.client.protocols="TLSv1" -Djavax.net.ssl.keyStore=directory -Djavax.net.ssl.keyStorePassword=blah -Djavax.net.ssl.trustStore=directory -Djavax.net.ssl.trustStorePassword=blah file


------------------------------
Vinay kumar