Configuring Our Websphere Mq Link To Use Ssl (Doc ID 1293302.1)

Last updated on SEPTEMBER 08, 2021

Applies to:

Symptoms

MGW SSL Websphere MQ Link fails with errors:

Caused by: javax.net.ssl.SSLKeyException: RSA premaster secret error
and
Caused by: java.security.InvalidKeyException: No installed provider supports this key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey

These errors are observed in MGW log file

>>2016-04-12 10:56:50 MGW Engine 0 434 worker0
Failed to access queue MYQUEUE@MQLINK; provider queue: XXX.YYY.ZZZZZZZ.AA
oracle.mgw.common.GatewayException: [800] MQSeries queue manager, MYQUEUE, creation failed
at oracle.mgw.common.MgwUtil.GatewayException(MgwUtil.java:733)
at oracle.mgw.drivers.mq.MQOPHandle.<init>(MQOPHandle.java:98)
at oracle.mgw.drivers.mq.MQOPHandleFactory.createOPHandle(MQOPHandleFactory.java:58)
at oracle.mgw.drivers.OPHandlePool.getHandle(OPHandlePool.java:133)
at oracle.mgw.drivers.mq.MQLink.registerDestination(MQLink.java:384)
at oracle.mgw.engine.DestMgr.getForeignDest(DestMgr.java:54)
at oracle.mgw.engine.JobData.init(JobData.java:233)
at oracle.mgw.engine.Worker.recoverJob(Worker.java:1086)
at oracle.mgw.engine.Worker.myRun(Worker.java:98)
at oracle.mgw.engine.ManagedThr.run(ManagedThr.java:58)

[Linked-exception]
com.ibm.mq.MQException: MQJE001: Completion Code 2, Reason 2397
at com.ibm.mq.MQManagedConnectionJ11.<init>(MQManagedConnectionJ11.java:282)
at com.ibm.mq.MQClientManagedConnectionFactoryJ11._createManagedConnection(MQClientManagedConnectionFactoryJ11.java:301)
at com.ibm.mq.MQClientManagedConnectionFactoryJ11.createManagedConnection(MQClientManagedConnectionFactoryJ11.java:323)
at com.ibm.mq.StoredManagedConnection.<init>(StoredManagedConnection.java:84)
at com.ibm.mq.MQSimpleConnectionManager.createConnection(MQSimpleConnectionManager.java:315)
at com.ibm.mq.MQQueueManager.createBaseMQQueueManager(MQQueueManager.java:1808)
at com.ibm.mq.MQQueueManager.construct(MQQueueManager.java:1645)
at com.ibm.mq.MQQueueManager.loopSearch(MQQueueManager.java:1104)
at com.ibm.mq.MQQueueManager.sequentialConstruct(MQQueueManager.java:985)
at com.ibm.mq.MQQueueManager.<init>(MQQueueManager.java:892)
at oracle.mgw.drivers.mq.MQOPHandle.<init>(MQOPHandle.java:94)
at oracle.mgw.drivers.mq.MQOPHandleFactory.createOPHandle(MQOPHandleFactory.java:58)
at oracle.mgw.drivers.OPHandlePool.getHandle(OPHandlePool.java:133)
at oracle.mgw.drivers.mq.MQLink.registerDestination(MQLink.java:384)
at oracle.mgw.engine.DestMgr.getForeignDest(DestMgr.java:54)
at oracle.mgw.engine.JobData.init(JobData.java:233)
at oracle.mgw.engine.Worker.recoverJob(Worker.java:1086)
at oracle.mgw.engine.Worker.myRun(Worker.java:98)
at oracle.mgw.engine.ManagedThr.run(ManagedThr.java:58)
Caused by: javax.net.ssl.SSLKeyException: RSA premaster secret error
at com.ibm.jsse2.cb.<init>(cb.java:62)
at com.ibm.jsse2.eb.a(eb.java:205)
at com.ibm.jsse2.eb.a(eb.java:206)
at com.ibm.jsse2.db.m(db.java:250)
at com.ibm.jsse2.db.a(db.java:70)
at com.ibm.jsse2.jc.a(jc.java:187)
at com.ibm.jsse2.jc.g(jc.java:480)
at com.ibm.jsse2.jc.a(jc.java:137)
at com.ibm.jsse2.jc.startHandshake(jc.java:168)
at com.ibm.mq.SSLHelper.configureSSLSocket(SSLHelper.java:768)
at com.ibm.mq.SSLHelper.createSSLSocket(SSLHelper.java:154)
at com.ibm.mq.MQInternalCommunications.createSocketConnection(MQInternalCommunications.java:2295)
at com.ibm.mq.MQv6InternalCommunications$1.run(MQv6InternalCommunications.java:166)
at java.security.AccessController.doPrivileged(AccessController.java:242)
at com.ibm.mq.MQv6InternalCommunications.initialize(MQv6InternalCommunications.java:163)
at com.ibm.mq.MQv6InternalCommunications.<init>(MQv6InternalCommunications.java:111)
at com.ibm.mq.MQSESSIONClient.MQCONNX(MQSESSIONClient.java:1458)
at com.ibm.mq.MQSESSIONClient.MQCONN(MQSESSIONClient.java:1369)
at com.ibm.mq.MQManagedConnectionJ11.<init>(MQManagedConnectionJ11.java:252)
... 18 more
Caused by: java.security.InvalidKeyException: No installed provider supports this key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey
at javax.crypto.Cipher.a(Unknown Source)
at javax.crypto.Cipher.init(Unknown Source)
at com.ibm.jsse2.cb.<init>(cb.java:65)
... 36 more

>>

Changes

You are trying to use SSL connections.
Non SSL connectiosn work properly

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.