MainframeKit

2400

MQRC_UNSUPPORTED_CIPHER_SUITE (X'0960')MQ REASON CODE

A Java program asked for a TLS cipher suite that its Java runtime does not support.

MOST LIKELY

The program uses an MQ CipherSpec name where a JSSE CipherSuite name is needed.

FIRST CHECK

Check the CipherSuite in the program and IBM's table that maps CipherSuites to CipherSpecs.

TRY IT ▸

MainframeKit assistant

What it means

This code is for Java and JMS programs only. The CipherSuite set in the program is not supported by JSSE. JSSE cipher suite names are not the same as the CipherSpec names set on MQ channels, so a name may need translating.

Typical causes

  • The program uses an MQ CipherSpec name where a JSSE CipherSuite name is needed.
  • The Java runtime does not offer that cipher suite, or has it disabled.
  • Name mapping differs between IBM and non-IBM Java runtimes.
  • FIPS mode is on and the channel uses a cipher outside FIPS.

How to fix it

  1. Check the CipherSuite in the program and IBM's table that maps CipherSuites to CipherSpecs.
  2. With a non-IBM Java runtime, check IBM's guidance on cipher mapping (the useIBMCipherMappings setting).
  3. Make sure the channel's SSLCIPH matches the cipher suite you choose.
  4. Check JSSE is installed and configured correctly.

Example

Illustrative only; names and values are invented.

MQJE001: Completion Code '2', Reason '2400'.