Hello everyone,
We are using rabbitmq broker and qpid-cpp-1.38.0 API to send/receive
messages to/from broker.
Currently, we are working properly using AMPQ 1.0 and using TCP
transport protocol.
Now, it is needed to add SSL protocols.
So, using openssl the following have been created:
-Certificate CA signed his private key
-Server key
-Server certificate signed with CA
-Client key
-Client certificate signed with CA
RabbiMQ SSL option has been enable and setup with CA certificate, server
certificate and sever key.
Using pk12util, client key and certificate have been imported to NSS to
be used by qpid-cpp client.
In example "client.cpp" file, the following have been added to connect
rabbitmq with SSL prior to connection.open()
setenv("QPID_SSL_CERT_NAME", "127.0.0.1-Client", 1);
setenv("QPID_SSL_CERT_DB", "/tmp/db", 1);
setenv("QPID_SSL_CERT_PASSWORD_FILE", "/tmp/pwf", 1);
The url and options are the following:
amqp:ssl:127.0.0.1:5671 {protocol:amqp1.0}
rabbitMQ logs shows:
TLS server: In state certify received CLIENT ALERT: Fatal - Unknown CA
And client qpid-cpp:
..
2019-07-24 16:12:03 [System] debug Exception constructed: Failed: NSS
error [-8172] (/qpid-cpp-1.38/src/qpid/sys/ssl/SslSocket.cpp:205)
2019-07-24 16:12:03 [Security] debug Failed to connect: Failed: NSS
error [-8172] (/qpid-cpp-1.38/src/qpid/sys/ssl/SslSocket.cpp:205)
After several tests it seems that qpid-cpp is not reading nor sending
the certificate because if not env variable QPID_SSL_CERT_NAME is set
the same result it is shown.
Is there anything we can check or maybe something we have missed?
Is there any sample of qpid-cpp using ssl?
P.S. Sorry for the long explanation.
Thanks in advance
Regards
________________________________
Este correo electrónico y, en su caso, cualquier fichero anexo al mismo,
contiene información de carácter confidencial exclusivamente dirigida a su
destinatario o destinatarios. Si no es vd. el destinatario indicado, queda
notificado que la lectura, utilización, divulgación y/o copia sin autorización
está prohibida en virtud de la legislación vigente. En el caso de haber
recibido este correo electrónico por error, se ruega notificar inmediatamente
esta circunstancia mediante reenvío a la dirección electrónica del remitente.
Evite imprimir este mensaje si no es estrictamente necesario.
This email and any file attached to it (when applicable) contain(s)
confidential information that is exclusively addressed to its recipient(s). If
you are not the indicated recipient, you are informed that reading, using,
disseminating and/or copying it without authorisation is forbidden in
accordance with the legislation in effect. If you have received this email by
mistake, please immediately notify the sender of the situation by resending it
to their email address.
Avoid printing this message if it is not absolutely necessary.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
