How to add a CipherSpec in WebSphere MQ components

TalendSolutionExpert — Tue, 06 Feb 2024 15:10:57 GMT

Components such as tMomConnection, tMomInput, and tMomOutput only have a CipherSpec of TLS1.0. By default, JDK 1.8 supports TLS1.2, so you can add ciphers like TLS_RSA_WITH_AES_256_CBC_SHA256 to these components.

To add TLS1.2 ciphers:

Shut down Studio.
Navigate to Studio_Installed_dir\studio\plugins\org.talend.designer.components.localprovider_6.1.1.20170623_1246\components\tMomConnection. You will find a list of files associated with the tMomConnection component.
Open the tMomConnection_java.xml file and search for the NAME="MQ_SSL_CIPHER" parameter.

Add the following configuration between the <ITEMS DEFAULT="NULL_MD5"> and <ITEM> tags.

<ITEM NAME="TLS_RSA_WITH_AES_256_CBC_SHA256" VALUE="SSL_RSA_WITH_AES_256_CBC_SHA256" />

In the same directory, locate the tMomConnection_messages.properties file.
Open the file and search for the keyword MQ_SSL_CIPHER.NAME. Locate the parameter your TLS version should follow in the Set_ciphersec drop-down list.

Add a new line, and paste in the following configuration:

MQ_SSL_CIPHER.ITEM.TLS_RSA_WITH_AES_256_CBC_SHA256=TLS_RSA_WITH_AES_256_CBC_SHA256

Save the files, tMomConnection_messages.properties and tMomConnection_java.xml, then relaunch Studio, after which you will be able to find the configuration in the drop-down list.
Once you successfully add a TLS1.2-supported CipherSpec, make sure to use the respective libraries in the component.

article How to add a CipherSpec in WebSphere MQ components in Official Support Articles

How to add a CipherSpec in WebSphere MQ components

To add TLS1.2 ciphers: