SSL CipherSuites supported by WebSphere MQ


The following table lists the CipherSpecs supported by WebSphere MQ, and their associated CipherSuite names. Specify the CipherSpec name in the SSLCIPH property of the SVRCONN channel on the queue manager. Specify the CipherSuite name:

  • In MQEnvironment.sslCipherSuite or MQC.SSL_CIPHER_SUITE_PROPERTY of WebSphere MQ base Java

  • Using the setSSLCipherSuite() method of MQConnectionFactory in JMS

  • Using the SSLCIPHERSUITE (SCPHS) property from JMSAdmin

The set of supported CipherSuites varies between JSSE providers; those CipherSuites not supported by the IBM implementation of JSSE are marked with an asterisk.

Table 49. CipherSpecs and matching CipherSuites

CipherSpec CipherSuite
DES_SHA_EXPORT SSL_RSA_WITH_DES_CBC_SHA
DES_SHA_EXPORT1024 SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA *
NULL_MD5 SSL_RSA_WITH_NULL_MD5
NULL_SHA SSL_RSA_WITH_NULL_SHA
RC2_MD5_EXPORT SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
RC4_56_SHA_EXPORT1024 SSL_RSA_EXPORT1024_WITH_RC4_56_SHA *
RC4_MD5_US SSL_RSA_WITH_RC4_128_MD5
RC4_MD5_EXPORT SSL_RSA_EXPORT_WITH_RC4_40_MD5
RC4_SHA_US SSL_RSA_WITH_RC4_128_SHA
TRIPLE_DES_SHA_US SSL_RSA_WITH_3DES_EDE_CBC_SHA

 

WebSphere is a trademark of the IBM Corporation in the United States, other countries, or both.

 

IBM is a trademark of the IBM Corporation in the United States, other countries, or both.