Hiya,
I hit reply but it never appeared so trying again. Sorry if this comes through twice!
The TLS handshake transcript is printed out as part of the trace files, specifically the
amqrmppa and
Client application trace files. I can't give you an exact file name as the trace files are named after the process ID, however if you look at the top of the files you should be able to see the process name.
To find the TLS transcript look for the function
cciSSLHandshakeTranscript as this is the function we use to print out the transcript.
One other important note is that you need to be tracing at the 'detailed' level (i.e. strmqtrc -t detail), this is something that may have not been put into the documentation so i'll check and get it added if needed.
I hope this helps!
------------------------------
Rob Parker
------------------------------
Original Message:
Sent: Thu November 05, 2020 02:37 AM
From: M Sands
Subject: TLS Handshake Transcript
Hi,
The capability to to produce a TLS handshake transcript (similar to capability in Java via -Djavax.net.debug=ssl) script was introduced in 9.1.4 release. It is mentioned in the knowledge center here:
https://www.ibm.com/support/knowledgecenter/SSFKSJ_9.1.0/com.ibm.mq.pro.doc/q133220_.htm
I have tried to produce this transcript via normal MQ/GSKit trace capability of a failing TLS handshake but can't fine this output in normal trace files.Are details on how to actually produce this transcript covered anywhere? Does it have a special file name or is it part of the normal trace output. Apologies if I'm missing something.
Thank you.
------------------------------
M Sands
Engineer
Other
London
01322 489635
------------------------------