Hi Paul, when I opened the QPID-3175 the SSL support didn't worked for me even in combination with PLAIN SASL mechanism. But some sort of SSL implementation was already present for the code. So it is possible that I just didn't configured it correctly. Also, I believe the SSL support in Python changed in Python 2.6 ... that may have also caused the SSL support to stop working.
Regards Jakub On Fri, Apr 13, 2012 at 03:31, Paul Colby <[email protected]> wrote: > Ah ok. I was thinking that since there were so many references to SSL / > TLS in the python code, that it probably was supported, but needed to be > switched on explicitly somehow (such as via an amps:ssl:host url) since the > Py code doesn't understand the NSS environment variables. > > I also thought that QPID-3175 may have been limited to the desire to use an > explicit SSL client certificate (ie for client SSL authentication), not for > Py SSL in general. > > Thanks for clearing it up for me :) > > It would have been great if there was some official statement somewhere in > docs stating the official level of SSL support in the Py tools, but > assuming they're expected to work properly in 0.16, there's probably no > need for that now. > > Thanks again, > > pc > ---- > http://colby.id.au > > > On Thu, Apr 12, 2012 at 9:34 PM, Pavel Moravec <[email protected]> wrote: > >> Hi Paul, >> I think the answer is "no", as all qpid-* tools are Python-based and SSL >> support in Python client is not resolved fully - see >> https://issues.apache.org/jira/browse/QPID-3175 for details. >> >> Kind regards, >> Pavel Moravec >> >> >> ----- Original Message ----- >> > From: "Paul Colby" <[email protected]> >> > To: [email protected] >> > Sent: Thursday, April 12, 2012 4:20:55 AM >> > Subject: Does the qpid-cluster command support SSL? >> > >> > Hi, >> > >> > Just wondering, is the qpid-cluster command line utility meant to >> > support >> > SSL somehow? ie If my brokers are configured to require encryption, >> > can I >> > still use the qpid-cluster command? Interested in the answer for >> > both 0.14 >> > (I'm using now), and 0.16 (would love to use soon :) >> > >> > It looks to me like the answer is "no" for both 0.14 and 0.16... but >> > please >> > tell me I'm wrong ;) >> > >> > Thanks! :) >> > >> > pc >> > ---- >> > http://colby.id.au >> > >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> >> --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
