The following table lists the CipherSpecs supported by WebSphere MQ, and
their associated CipherSuite names. The CipherSpec name should be
specified in the SSLCIPH property of the SVRCONN channel on the queue
manager. The CipherSuite name should be specified in
MQEnvironment.sslCipherSuite or MQC.SSL_CIPHER_SUITE_PROPERTY of
WebSphere MQ base Java, or using the setSSLCipherSuite() method of
MQConnectionFactory in JMS, or using the SSLCIPHERSUITE (SCPHS) property from
JMSAdmin. The set of supported CipherSuites will vary between JSSE
providers; those CipherSuites not supported by the IBM implementation of
JSSE are marked with an asterisk.
Table 49. CipherSpecs and matching CipherSuites
| CipherSpec | CipherSuite |
|---|---|
| DES_SHA_EXPORT | SSL_RSA_WITH_DES_CBC_SHA |
| DES_SHA_EXPORT1024 | SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA * |
| NULL_MD5 | SSL_RSA_WITH_NULL_MD5 |
| NULL_SHA | SSL_RSA_WITH_NULL_SHA |
| RC2_MD5_EXPORT | SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5 |
| RC4_56_SHA_EXPORT1024 | SSL_RSA_EXPORT1024_WITH_RC4_56_SHA * |
| RC4_MD5_US | SSL_RSA_WITH_RC4_128_MD5 |
| RC4_MD5_EXPORT | SSL_RSA_EXPORT_WITH_RC4_40_MD5 |
| RC4_SHA_US | SSL_RSA_WITH_RC4_128_SHA |
| TRIPLE_DES_SHA_US | SSL_RSA_WITH_3DES_EDE_CBC_SHA |