search

ibm-messaging / mq-mqi-nodejs

Calling IBM MQ from Node.js - a JavaScript MQI wrapper
Apache License 2.0
79 stars 41 forks source link

SSL Initialization Error with same Config #171

Open sidings opened 11 months ago

sidings commented 11 months ago

mq-mqi-nodejs version - 1.0.0

I recently updated the package version from 0.9.23 to 1.0.0, which was an upgrade in MQ version from 9.2.5 to 9.3.0. I haven't changed the certs or the keys for connecting to the queue manager I'm working with, since they shouldn't have been specific to my application. However, I'm getting this error when connecting with the same config:

MQError: CONNX: MQCC = MQCC_FAILED [2] MQRC = MQRC_SSL_INITIALIZATION_ERROR

Is there anything I'm missing from bumping these versions up, maybe in terms of configuration, that could cause this issue?

For reference, these were the error logs from the MQ server:

AMQ9658E: Certificate is not within validity period.

EXPLANATION:
A certificate has been encountered which failed checks on its validity period.
The certificate has either expired, or is not yet valid for use. The channel is
'????'; in some cases its name cannot be determined and so is shown as '????'.
The channel did not start.

However, we checked the certificates and keys and none have expired, or are due to expire soon.

ibmmqmet commented 11 months ago

I don't know of any changes either in this library or in the underlying MQ client that would affect this.

Don't forget to check not just the qmgr and client's individual certs, but also all the signing certs in the chain. See, for example, https://www.ibm.com/support/pages/ibm-mq-certificate-authority-chain-information