ibm-mq - AMQ9641 : Remote CipherSpec error for channel IBM WebSphere MQ client 8. 0.0.9

Question

我在 Webspere MQ 客户端 v 8.0.0.9 的命令下运行(仅命令行而非 Web 客户端)，我无法连接 MQ 服务器

/opt/mqm/samp/bin/amqsgetc Q-name Q-manager

我正在导出

export MQCHLTAB=xxx.TAB                   ---------xxx.TAB under /var/mqm
export MQCHLLIB=/var/mqm
export MQSSLKEYR=/var/mqm/ssl/cms/cert     -------- cert.kdb under cms dir using
export MQSERVER=channel-name/TCP/'xx.xx.xx.xx(xxx)'

我得到的错误是

07/04/2018 09:22:20 AM - Process(6024.1) User(username) Program(amqsgetc)
                    Host(hostname) Installation(Installation1)
                    VRMF(8.0.0.9) QMgr(.)

AMQ9641: Remote CipherSpec error for channel 'ch-name' to host
'MQ-server-ip(port)'.

EXPLANATION:
The remote end of channel 'ch-name' on host 'MQ-server-ip(port)' has had
a CipherSpec error. The channel did not start.
ACTION:
Review the error logs on the remote system to discover the problem with the
CipherSpec.
----- cmqxrfpt.c : 573 --------------------------------------------------------

Answer 1

简短的回答是删除 MQSERVER 环境变量。有关详细信息和引用，请阅读下文。

---

如果您指定了 MQSERVER 环境变量，MQ 将只使用此信息而忽略 CCDT 环境变量(MQCHLLIB 和 MQCHLTAB)。

这在 IBM MQ 知识中心页面中引用Configuring > Configuring connections between the server and clients > Using IBM MQ environment variables > MQSERVER > Using MQSERVER .

If you use the MQSERVER environment variable to define the channel between your IBM® MQ MQI client machine and a server machine, this is the only channel available to your application, and no reference is made to the client channel definition table (CCDT).

---

有关 MQ 应用程序如何确定连接详细信息的更多信息，请参阅 IBM MQ 知识中心页面 Developing applications > Developing MQI applications with IBM MQ > Writing client procedural applications > Running applications in the IBM MQ MQI client environment > Connecting IBM MQ MQI client applications to queue managers

When an application running in an IBM MQ client environment issues an MQCONN or MQCONNX call, the client identifies how it is to make the connection. When an MQCONNX call is issued by an application on an IBM MQ client, the MQI client library searches for the client channel information in the following order:

1. Using the contents of the ClientConnOffset or ClientConnPtr fields of the MQCNO structure (if supplied). These fields identify the channel definition structure (MQCD) to be used as the definition of the client connection channel. Connection details can be overridden by using a pre-connect exit. For more information, see Referencing connection definitions using a pre-connect exit from a repository.
2. If the MQSERVER environment variable is set, the channel it defines is used.
3. If an mqclient.ini file is defined and contains a ServerConnectionParms, the channel that it defines is used. For more information, see Configuring a client using a configuration file and CHANNELS stanza of the client configuration file.
4. If the MQCHLLIB and MQCHLTAB environment variables are set, the client channel definition table they point to is used.
5. If an mqclient.ini file is defined and contains ChannelDefinitionDirectory and ChannelDefinitionFile attributes, these attributes are used to locate the client channel definition table. For more information, see Configuring a client using a configuration file and CHANNELS stanza of the client configuration file.

6. Finally, if the environment variables are not set, the client searches for a client channel definition table with a path and name that are established from the DefaultPrefix in the mqs.ini file. If the search for a client definition table fails, the client uses the following paths:

   • UNIX and Linux systems: /var/mqm/AMQCLCHL.TAB
   • Windows: C:\Program Files\IBM\WebSphere MQ\amqclchl.tab
   • IBM i: /QIBM/UserData/mqm/@ipcc
   • IBM MQ Appliance: _AMQCLCHL.TAB. They appear under the mqbackup:// URI.

---

您不能使用 MQSERVER 环境变量指定 Cipherspec。这在 IBM MQ 知识中心页面中被引用 Configuring > Configuring connections between the server and clients > Using IBM MQ environment variables > MQSERVER

MQSERVER environment variable is used to define a minimal channel. MQSERVER specifies the location of the IBM® MQ server and the communication method to be used.

You cannot use MQSERVER to define an SSL channel or a channel with channel exits. For details of how to define an SSL channel, see Protecting channels with SSL.