JBOSS 7.2.4 連接到 MQ 時出現錯誤 ssl 錯誤

Question

嗨，與 MQ 連接 Jboss 7.2.4 出現以下錯誤請協助

2020-07-31 08:33:48,343 INFO  [org.jboss.as.connector.deployers.RaXmlDeployer] (Controller Boot Thread) wmq.jmsra.rar: '.
2020-07-31 08:33:48,346 ERROR [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0215: Failed to resume activity org.jboss.as.ejb3.component.messagedriven.MessageDrivenComponent$1@b1f771. To resume normal operation it is recommended that you restart the server.: java.lang.RuntimeException: WFLYEJB0501: Failed to activate MDB PaymentListener
    at org.jboss.as.ejb3.component.messagedriven.MessageDrivenComponent.activate(MessageDrivenComponent.java:279)
    at org.jboss.as.ejb3.component.messagedriven.MessageDrivenComponent.access$300(MessageDrivenComponent.java:63)
    at org.jboss.as.ejb3.component.messagedriven.MessageDrivenComponent$1.resume(MessageDrivenComponent.java:109)
    at org.jboss.as.server.suspend.SuspendController.resume(SuspendController.java:126)
    at org.jboss.as.server.ServerService.finishBoot(ServerService.java:420)
    at org.jboss.as.server.ServerService.boot(ServerService.java:388)
    at org.jboss.as.controller.AbstractControllerService$1.run(AbstractControllerService.java:372)
    at java.lang.Thread.run(Thread.java:745)
Caused by: com.ibm.mq.connector.DetailedResourceAdapterInternalException: MQJCA1011: Failed to allocate a JMS connection., error code: MQJCA1011 An internal error caused an attempt to allocate a connection to fail. See the linked exception for details of the failure.
    at com.ibm.mq.connector.services.JCAExceptionBuilder.buildException(JCAExceptionBuilder.java:134)
    at com.ibm.mq.connector.services.JCAExceptionBuilder.buildException(JCAExceptionBuilder.java:105)
    at com.ibm.mq.connector.inbound.ConnectionHandler.allocateConnection(ConnectionHandler.java:301)
    at com.ibm.mq.connector.inbound.MessageEndpointDeployment.acquireConnection(MessageEndpointDeployment.java:279)
    at com.ibm.mq.connector.inbound.MessageEndpointDeployment.<init>(MessageEndpointDeployment.java:231)
    at com.ibm.mq.connector.ResourceAdapterImpl.endpointActivation(ResourceAdapterImpl.java:380)
    at org.jboss.jca.core.rar.EndpointImpl.activate(EndpointImpl.java:208)
    at org.jboss.as.ejb3.component.messagedriven.MessageDrivenComponent.activate(MessageDrivenComponent.java:277)
    ... 7 more
Caused by: com.ibm.msg.client.jms.DetailedJMSException: JMSWMQ0018: Failed to connect to queue manager 'QM_SSL' with connection mode 'Client' and host name 'null'.
Check the queue manager is started and if running in client mode, check there is a listener running. Please see the linked exception for more information.
    at com.ibm.msg.client.wmq.common.internal.Reason.reasonToException(Reason.java:585)
    at com.ibm.msg.client.wmq.common.internal.Reason.createException(Reason.java:221)
    at com.ibm.msg.client.wmq.internal.WMQConnection.getConnectOptions(WMQConnection.java:1373)
    at com.ibm.msg.client.wmq.internal.WMQConnection.<init>(WMQConnection.java:343)
    at com.ibm.msg.client.wmq.internal.WMQXAConnection.<init>(WMQXAConnection.java:75)
    at com.ibm.msg.client.wmq.factories.WMQXAConnectionFactory.createV7ProviderConnection(WMQXAConnectionFactory.java:195)
    at com.ibm.msg.client.wmq.factories.WMQConnectionFactory.createProviderConnection(WMQConnectionFactory.java:6254)
    at com.ibm.msg.client.wmq.factories.WMQXAConnectionFactory.createProviderXAConnection(WMQXAConnectionFactory.java:107)
    at com.ibm.msg.client.jms.admin.JmsConnectionFactoryImpl.createXAConnectionInternal(JmsConnectionFactoryImpl.java:378)
    at com.ibm.mq.jms.MQXAConnectionFactory.createXAConnection(MQXAConnectionFactory.java:129)
    at com.ibm.mq.connector.inbound.ConnectionHandler.allocateConnection(ConnectionHandler.java:203)
    ... 12 more
Caused by: com.ibm.mq.MQException: JMSCMQ0001: WebSphere MQ call failed with compcode '2' ('MQCC_FAILED') reason '2400' ('MQRC_UNSUPPORTED_CIPHER_SUITE').
    at com.ibm.msg.client.wmq.common.internal.Reason.createException(Reason.java:209)

Answer 1

看起來您的連接工廠上定義的密碼規范與您的 MQ 通道上配置的密碼套件不兼容或 IBM MQ 支持的密碼套件不兼容。

您可以檢查應用程序服務器配置中的連接工廠設置。 要檢查通道，您可以使用 IBM MQ 控制台或runmqsc <YOUR_QM_NAME> ，然后運行DISPLAY CHANNEL('<YOUR_CHANNEL_NAME>')來查找SSLCIPH( )的值。

IBM MQ 知識中心中的此頁面概述了密碼命名策略和互操作性。 在這里查看別名選項可能也值得一看。

如果您使用的是非 IBM JRE，請檢查您是否為應用程序服務器運行時設置了 JVM 屬性-Dcom.ibm.mq.cfg.useIBMCipherMappings=false 。

這里有一個簡單的 IBM MQ TLS 教程，其中包含更詳細的概述並包含一些有用的鏈接。