SSLFIPSREQUIRED object property
If you require a connection to use a CipherSuite that is supported by the IBM Java JSSE FIPS provider (IBMJSSEFIPS), set the SSLFIPSREQUIRED property of the connection factory to YES.
The default value of this property is NO, which means that a connection can use any CipherSuite that is supported by IBM MQ.
If an application uses more than one connection, the value of SSLFIPSREQUIRED that is used when the application creates the first connection determines the value that is used when the application creates any subsequent connection. This means that the value of the SSLFIPSREQUIRED property of the connection factory that is used to create a subsequent connection is ignored. We must restart the application if we want to use a different value of SSLFIPSREQUIRED.
An application can set this property by calling the setSSLFipsRequired() method of a ConnectionFactory object. The property is ignored if no CipherSuite is set.
Parent topic: Use TLS with IBM MQ classes for JMSRelated information
- Specify that only FIPS-certified CipherSpecs are used at run time on the MQI client
- Federal Information Processing Standards (FIPS) for UNIX, Linux, and Windows