MQ client connection with SSL enabled

Question

0.00/5 (No votes)

See more:

I have ReasonCode 2538 when I connect to server from client MQ .net using amqmdnet.dll.

public string Connection()
    { 
        MQQueueManager mqQueueManager = null;
        try
        {
            MQEnvironment.SSLCipherSpec = "TLS_RSA_WITH_AES_256_CBC_SHA256";
            MQEnvironment.SSLKeyRepository = @"D:\ssl\keytest";
            Hashtable properties = new Hashtable();
            properties.Add(MQC.HOST_NAME_PROPERTY, "192.168.8.103");
            properties.Add(MQC.PORT_PROPERTY, 1414);
            properties.Add(MQC.CHANNEL_PROPERTY, "SG_APP1.SVRCONN");
            mqQueueManager = new MQQueueManager("QM.SG00162", properties);
            return "Connected"; 
        }
        catch (MQException ex)
        {
            return ex.Message + " ReasonCode: " + ex.ReasonCode; 
        }
    }

And when I changed

MQEnvironment.SSLKeyRepository="*SYSTEM"

. I had a different ReasonCode 2059 Can you help me it's reason why. And recommend any solution for me, It's my code is correct? Thanks for help.

What I have tried:

I can handshake with server over SSL

Posted 22-Mar-21 20:16pm

mrdreamlife

Updated 23-Mar-21 3:20am

Add a Solution

1 solution

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

CHill60 · Answer 1 · 2021-03-23T03:20:00

We need to know quite a lot about your installation in order to work out what is going wrong here. You haven't supplied it and frankly this is probably the wrong place to reach out for this level of help.
A couple of starting points though ..
According to IBM documentation in the IBM Knowledge Center[^]

Quote:
An MQCONN call was issued from a client to connect to a queue manager but the attempt to allocate a conversation to the remote system failed. Common causes of this reason code are:
- The listener has not been started on the remote system.
- The connection name in the client channel definition is incorrect.
- The network is currently unavailable.
- A firewall blocking the port, or protocol-specific traffic.
- The security call initializing the IBM® MQ client is blocked by a security exit on the SVRCONN channel at the server.

They also suggest that you

Quote:
Examine the client error log for messages explaining the cause of the problem.

For the 2059 error they also suggest

Quote:
Ensure that the queue manager has been started. If the connection is from a client application, check the channel definitions, channel status, and error logs.

So your first step is to examine the error logs (or start tracing if you do not already have it switched on).
Make sure you have worked through all the steps in Writing and deploying IBM MQ.NET programs[^] - there is also a section on Troubleshooting connections in there

MQ client connection with SSL enabled

1 solution

Solution 1

Add your solution here

Preview 0

MQ client connection with SSL enabled

1 solution

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us