MainframeKit

2397

MQRC_JSSE_ERROR (X'095D')MQ REASON CODE

A Java program's TLS layer (JSSE) reported an error, usually during the TLS handshake with the queue manager.

MOST LIKELY

The truststore does not contain the CA certificate that signed the queue manager's certificate.

FIRST CHECK

Get the underlying exception with getCause() (or the linked exception in JMS) and read it.

TRY IT ▸

MainframeKit assistant

What it means

This code is for Java and JMS programs only. Something went wrong in the Java Secure Socket Extension, typically while setting up a TLS connection. MQ wraps the real Java exception, which holds the detail you need.

Typical causes

  • The truststore does not contain the CA certificate that signed the queue manager's certificate.
  • The keystore or truststore path or password is wrong.
  • The client and the channel do not agree on the TLS version or cipher.
  • A certificate has expired or the host name does not match.

How to fix it

  1. Get the underlying exception with getCause() (or the linked exception in JMS) and read it.
  2. Check the Java keystore and truststore settings and their contents.
  3. Compare the client cipher suite with the channel's SSLCIPH.
  4. Check certificate expiry dates on both sides.

Example

Illustrative only; names and values are invented.

MQJE001: Completion Code '2', Reason '2397'.
Caused by: javax.net.ssl.SSLHandshakeException: ...