If you’ve been making changes to your queue manager key repository, adding or removing certificates, or otherwise changing the security configuration on your queue manager, you might find things aren’t working as expected.
In a lot of cases, the SSL cache on the queue manager just needs a refresh. If so, you can fix this simply by using runmqsc to enter the queue manager and refresh the cache.
runmqsc <your queue manager name>
REFRESH SECURITY(*) TYPE(SSL)Show more
Run your application again, and things should work as expected.
If you’re running a java application, you can access extra security debugging info by adding these command-line arguments when you run the application:
-Djavax.net.debug=true -Djavax.net.debug=ssl:handshake