IT44707: IBM MQ Explorer connection details panel for a remote queue manager does not display cipher if TLS 1.2 used

APAR status

• Closed as program error.

Error description

• When a connection is made from the IBM MQ Explorer to a remote
  queue manager secured using a TLS 1.2 cipher, the dropdown in
  Connection Details -> SSL Options is blank, and does not display
  the cipher used to secure the connection.
  
  In some cases, when opening the "Connection Details" menu
  option, an error is seen with text "An internal error occurred
  while processing the SSL CipherSpec. The field will be reset to
  a blank value." before the connection details panel opens.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  This issue affects users of the IBM MQ Explorer making TLS
  1.2-secured connections to remote queue managers.
  
  
  Platforms affected:
  Windows, Linux on x86-64
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When a connection was made from the explorer to a remote queue
  manager secured using a TLS 1.2 cipher, the window generated by
  selecting the menu option: Right-click remote queue manager
  instance -> Connection Details -> SSL Options was blank, and did
  not display the cipher being used to secure the connection.
  
  In some cases, when opening the "Connection Details" menu
  option, an error was seen with text "An internal error occurred
  while processing the SSL CipherSpec. The field will be reset to
  a blank value." before the connection details panel opened.
  

Problem conclusion

• When a connection is made from the explorer to a remote queue
  manager secured using a TLS 1.2 cipher, the dropdown in
  Connection Details -> SSL Options now displays the cipher being
  used to secure the connection correctly.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.x CD    9.3.5
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ BASE V9.3

• Fixed component ID

  5724H7291

Applicable component levels