Hi,

can please someone help me to resolve an issue in Qpid Proton C++?

I need to connect to AMQP server securely with a client certificate 
authentication. Server uses a certificate signed by a trusted CA. I can load a 
certificate into ssl_client_options, but the constructor for 
ssl_client_options, requires a trust_db parameter as shown in the declaration 
below:


ssl_client_options (const ssl_certificate &, const std::string &trust_db, enum 
ssl::verify_mode=ssl::VERIFY_PEER_NAME)


When I connect with these options, I have to provide some trust_db, but I don't 
know how to provide a default certificate trust database. For now I have set 
the verify_mode to proton::ssl::ANONYMOUS_PEER, to skip servers identification 
check. If system's default trust certificate database would be used, 
proton::ssl::VERIFY_PEER_NAME should work just fine, but I don't know how to 
use it with this ss_client_options constructor.

Is there a way to provide ssl_certificate to ssl_client_options and leave the 
default certificate trust database at the same time?

Regards
Marko

Reply via email to