Channel SSL Error

Event name: Channel SSL Error.

Reason code in MQCFH: MQRC_CHANNEL_SSL_ERROR (2371, X'943').
Channel SSL Error.
Event description: This condition is detected when a channel using Secure Sockets
Layer (SSL) fails to establish an SSL connection.
ReasonQualifier identifies the nature of the error.
Event type: SSL.
Platforms:  WebSphere MQ for AIX

 WebSphere MQ for HP-UX

 WebSphere MQ for iSeries
 WebSphere MQ for Linux
 WebSphere MQ for Solaris
 WebSphere MQ for Windows
 WebSphere MQ for z/OS

Event queue: SYSTEM.ADMIN.CHANNEL.EVENT.

Event data
QMgrName

Description: Name of the queue manager generating the event.

Identifier: MQCA_Q_MGR_NAME.
Datatype: MQCFST.
Maximum MQ_Q_MGR_NAME_LENGTH.
length:
Returned: Always.
ReasonQualifier

Description: Identifier that qualifies the reason code.

Identifier: MQIACF_REASON_QUALIFIER.
Datatype: MQCFIN.
Values: MQRQ_SSL_HANDSHAKE_ERROR
The key exchange / authentication failure arose during the
SSL handshake.
MQRQ_SSL_CIPHER_SPEC_ERROR
The SSL client CipherSpec does not match that on the SSL
server channel definition.
MQRQ_SSL_PEER_NAME_ERROR
The Distinguished Name in the certificate sent by one end of
the SSL channel does not match the peer name on the end of
the channel definition at the other end of the SSL channel.
 MQRQ_SSL_CLIENT_AUTH_ERROR
The SSL server channel definition specified
SSLCAUTH(REQUIRED) but the SSL client did not provide
a certificate.

Returned: Always.
ChannelName

Description: Channel Name.

Identifier: MQCACH_CHANNEL_NAME.
Datatype: MQCFST.
Maximum MQ_CHANNEL_NAME_LENGTH.
length:
Returned: The ChannelName may not be available if the channel has not yet got
far enough through its start-up process, in this case the channel name
will not be returned. Otherwise always.
XmitQName

Description: Transmission queue name.

Identifier: MQCACH_XMIT_Q_NAME.
Datatype: MQCFST.
Returned: For sender, server, cluster-sender and cluster-receiver channels only.
ConnectionName

Description: If the channel has successfully established a TCP connection, this is

the Internet address. Otherwise it is the contents of the
ConnectionName field in the channel definition.
Identifier: MQCACH_CONNECTION_NAME.
Datatype: MQCFST.
Maximum MQ_CONN_NAME_LENGTH.
length:
Returned: The ConnectionName may not be available if the channel has not yet
got far enough through its start-up process, in this case the
connection name will not be returned. Otherwise always.
SSLHandshakeStage

Description: The name of the SSL function call giving the error, or on Windows, a
description of the error is given in some cases. Details of these
function names for specific platforms can be found as follows:
 For z/OS, see the System Secure Sockets Layer Programming
Guide and Reference, SC24-5877.
 For other platforms, see WebSphere MQ Messages, GC34-
6057.
 For Windows, when the text consists of a description of the
error, no further information is available.
Identifier: MQCACH_SSL_HANDSHAKE_STAGE.
Datatype: MQCFST.
Maximum MQ_SSL_HANDSHAKE_STAGE_LENGTH.
 length:
Returned: This field is only present if ReasonQualifier is set to
MQRQ_SSL_HANDSHAKE_ERROR.
SSLReturnCode

Description: A numeric return code from a failing SSL call.

On Windows, if the SSLHandshakeStage contains a description of
the error, the numeric return code will be an MQRC_* value.
Details of SSL Return Codes for specific platforms can be found as
follows:
 For z/OS, see WebSphere MQ for z/OS Messages and Codes,
GC34-6056.
 For other platforms, see WebSphere MQ Messages, GC34-
6057.
 For Windows, if the return code is an MQRC_* value see the
WebSphere MQ Application Programming Reference, SC34-
6062.
Identifier: MQIACH_SSL_RETURN_CODE.
Datatype: MQCFIN.
Returned: This field is only present if ReasonQualifier is set to
MQRQ_SSL_HANDSHAKE_ERROR.
SSLPeerName

Description: The Distinguished Name in the certificate sent from the remote
system.
Identifier: MQCACH_SSL_PEER_NAME.
Datatype: MQCFST.
Maximum MQ_DISTINGUISHED_NAME_LENGTH.
length:
Returned: This field is only present if ReasonQualifier is set to
MQRQ_SSL_PEER_NAME_ERROR and is not always present for
this reason qualifier.