| Author |
Message |
 Topic: SSL certs with MQ that don't have Client Authentication EKU |
tczielke
Replies: 3
Views: 1670
|
 Forum: IBM MQ Security Posted: Mon Nov 03, 2025 6:39 am Subject: SSL certs with MQ that don't have Client Authentication EKU |
Hi James,
There is a blog post about this topic here.
It's a good thing that as per the blog GSKIT does not care about the type (server / client) so the qmgr to qmgr channels should still be f ... |
| Topic: SSL certs with MQ that don't have Client Authentication EKU |
tczielke
Replies: 3
Views: 1670
|
Forum: IBM MQ Security Posted: Fri Oct 31, 2025 7:24 am Subject: SSL certs with MQ that don't have Client Authentication EKU |
Hi James,
There is a blog post about this topic here.
https://community.ibm.com/community/user/blogs/robert-parker1/2025/09/23/ibm-mq-and-extended-key-usage
You should ask your CA if they als ... |
| Topic: Simulate a queue manager crash RDQM |
tczielke
Replies: 9
Views: 29166
|
Forum: IBM MQ Installation/Configuration Support Posted: Wed Jul 24, 2024 1:29 pm Subject: Simulate a queue manager crash RDQM |
I am not sure if this is exactly what you are asking, but you can corrupt the qm.ini.
For example,
cp -p qm.ini qm.ini.bkp
echo wieo5uy20u534rwlnsfklweh4i29342-3urakldhfkjshdiry2034yr203u420342 ... |
| Topic: Android MQOptions app |
tczielke
Replies: 6
Views: 67621
|
Forum: News/Updates Posted: Tue Jun 11, 2024 9:23 am Subject: Android MQOptions app |
| I wanted to say thank you to the two people who bought this app. I made about a $1.50 off the app in 2018, and then 5 years later Google settled a lawsuit where anyone who sold an Android app during a ... |
| Topic: Is there a way to monitor a queue? |
tczielke
Replies: 4
Views: 6873
|
Forum: General IBM MQ Support Posted: Sun Oct 16, 2022 3:42 am Subject: Is there a way to monitor a queue? |
| The Application Activity Trace that comes with IBM MQ is another tool to review to see if it meets your requirements. |
| Topic: sending multiline message to MQ queue using amqsput |
tczielke
Replies: 3
Views: 6763
|
Forum: General IBM MQ Support Posted: Wed Oct 12, 2022 10:23 am Subject: sending multiline message to MQ queue using amqsput |
Here are some options that IBM MQ has documented.
https://www.ibm.com/support/pages/what-options-are-available-putting-contents-file-messages-mq-queue-mft-amqsputc-ma01-qexe-mh06-mqfile2msg-ih03-rf ... |
| Topic: SSL/TLS Certificate Aliases with blanks |
tczielke
Replies: 6
Views: 32591
|
Forum: IBM MQ Java / JMS Posted: Tue Sep 27, 2022 9:16 am Subject: SSL/TLS Certificate Aliases with blanks |
In the class documentation for java.security.KeyStore, it does have the following blurb:
Whether aliases are case sensitive is implementation dependent. In order to avoid problems, it is recommende ... |
| Topic: Java Client and ANY_TLS12_OR_HIGHER |
tczielke
Replies: 8
Views: 35950
|
Forum: IBM MQ Security Posted: Tue Sep 28, 2021 12:21 pm Subject: Java Client and ANY_TLS12_OR_HIGHER |
It sounds like the gskit is doing a good job keeping up then with TLS 1.3. 
I was surprised to see you have to go to Java 11 to get some TLS 1.3 support, and only some support at that. Not sure ... |
| Topic: Java Client and ANY_TLS12_OR_HIGHER |
tczielke
Replies: 8
Views: 35950
|
Forum: IBM MQ Security Posted: Tue Sep 28, 2021 4:46 am Subject: Java Client and ANY_TLS12_OR_HIGHER |
| In the testing I have done with IBM MQ and TLS 1.3, the Java side had to be at 11 to support TLS 1.3. I believe it was openJDK 11 that was supported, too. It looked like the openJDK 11 also only suppo ... |
| Topic: Java Client and ANY_TLS12_OR_HIGHER |
tczielke
Replies: 8
Views: 35950
|
Forum: IBM MQ Security Posted: Thu Sep 23, 2021 5:58 am Subject: Java Client and ANY_TLS12_OR_HIGHER |
| For the environment where you see mismatched jar versions, that does sound like there are back-leveled jars somewhere that are getting pulled into this client application. That could also explain the ... |
| Topic: Java Client and ANY_TLS12_OR_HIGHER |
tczielke
Replies: 8
Views: 35950
|
Forum: IBM MQ Security Posted: Sat Sep 04, 2021 8:47 am Subject: Java Client and ANY_TLS12_OR_HIGHER |
| I did a test at 9.2.0.1 on Linux I see similar behavior of a 2400 with a non-IBM JRE using useIBMCipherMappings=false and sslCipherSuite=ANY_TLS12_OR_HIGHER not working. However, switching the sslCiph ... |
| Topic: MQ Explorer SVRCONN channel status |
tczielke
Replies: 17
Views: 19684
|
Forum: General IBM MQ Support Posted: Fri Jul 02, 2021 4:16 am Subject: MQ Explorer SVRCONN channel status |
Will a trace taken on the MQ client platform be of any use, if I send it to the IBM support centre?
(tracing on z/OS MQ really is most unfriendly to use and has to be sent as a dump to IBM).
An ... |
| Topic: MQ Explorer SVRCONN channel status |
tczielke
Replies: 17
Views: 19684
|
Forum: General IBM MQ Support Posted: Thu Jul 01, 2021 5:34 am Subject: MQ Explorer SVRCONN channel status |
| z/OS does have an MQ API trace. It is not as user friendly as the Application Activity Trace, but you can see some of the API calls and control blocks (e.g. GMO) in this trace. The MH06 supportpac has ... |
| Topic: JMS queue URI - Vendor app doesn't allow qMgrName |
tczielke
Replies: 15
Views: 95916
|
Forum: IBM MQ Java / JMS Posted: Wed Jun 09, 2021 1:16 pm Subject: JMS queue URI - Vendor app doesn't allow qMgrName |
| Thanks, that helps clarify. I think we just have a different interpretation/understanding of what is meant by JMS portability. |
| Topic: JMS queue URI - Vendor app doesn't allow qMgrName |
tczielke
Replies: 15
Views: 95916
|
Forum: IBM MQ Java / JMS Posted: Wed Jun 09, 2021 8:23 am Subject: JMS queue URI - Vendor app doesn't allow qMgrName |
I am not saying that it is not JMS compliant to use the Session.createQueue method. However, the documentation for that method is warning that your application may become non-portable if you use it.
... |
