activemq-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Timothy Bish (JIRA)" <j...@apache.org>
Subject [jira] Resolved: (AMQCPP-140) Add SSL transport
Date Wed, 26 May 2010 18:09:53 GMT

     [ https://issues.apache.org/activemq/browse/AMQCPP-140?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Timothy Bish resolved AMQCPP-140.
---------------------------------

    Resolution: Fixed

OpenSSL support implemented in trunk.  Tested on Redhat and Windows.  

Hopefully others with access to different platforms will report their results.

Notes:

* SSL transport in ActiveMQ-CPP is specified using the transport URI prefix 'ssl'
* The key and trust store are set as System properties using the decaf library methods as
follows.

To set the location of the client key file (Must be in PEM format) call:

decaf::lang::System::setProperty( "decaf.net.ssl.keyStore", "<path/filename>" );

optionally a password can be provided as:

decaf::lang::System::setProperty( "decaf.net.ssl.keyStorePassword", "password" );

To set the location of the trusted certificate for the broker, or the trusted root certificate
for all your brokers the location of the file (again in PEM format) is set via:

decaf::lang::System::setProperty( "decaf.net.ssl.trustStore", "<path/filename>" );

These methods should be called before you create your first ConnectionFactory.

> Add SSL transport
> -----------------
>
>                 Key: AMQCPP-140
>                 URL: https://issues.apache.org/activemq/browse/AMQCPP-140
>             Project: ActiveMQ C++ Client
>          Issue Type: New Feature
>    Affects Versions: 2.2
>            Reporter: Nathan Mittler
>            Assignee: Timothy Bish
>             Fix For: 3.2.0
>
>         Attachments: amqcpp-ssl.patch3
>
>
> Need a secure transport for activemq-cpp.  Some options for ssl support:
> 1) OpenSSL - fairly robust set of ssl functions
> 2) APR - trunk has added support for ssl sockets.  An attractive option, given that we're
already starting to incorporate API in other areas.
> Should create a Java-like set of classes in decaf to add basic ssl support, then use
those classes to make an SSLTransport in activemq-cpp.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message