Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (nike.apache.org: domain of bruce.snyder@gmail.com
 designates 209.85.220.215 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=V6tVGPCelLhiSuCEjgImrmi5BtXICAor9Ropwj7jUoiP9HjSQBj4f9WCsUIljDkL22
         BwqeMU4j1SaR/2ismgEK7Y5aOlXCPnXilWrK40pI0LyOAJxjlF7XGeUmLBla3PqaIwEa
         Jd5F92v+uLnBwfdJ3x1AMUFuQRGO3HDCmcMpg=
MIME-Version: 1.0
In-Reply-To: <27429414.post@talk.nabble.com>
References: <27429414.post@talk.nabble.com>
Date: Wed, 3 Feb 2010 16:54:13 -0700
Message-ID: <7b3355cb1002031554v1c47cd2r1c55c15a9b169f35@mail.gmail.com>
Subject: Re: Configuring ActiveMQ Embedded Broker over HTTPS
From: Bruce Snyder <bruce.snyder@gmail.com>
To: users@activemq.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Tue, Feb 2, 2010 at 4:48 PM, Boris Belov <bbelov2@gmail.com> wrote:
>
> Hello,
>
> We are attempting to configure embedded =A0ActiveMQ broker over https and
> failing to do so. Any attempt to start the broker results in
> jetty.ssl.password prompt.
> After entering the password the following exception is generated.
>
> 2010-02-02 15:47:10.931::INFO: =A0jetty-6.1.11
> 2010-02-02 15:47:10.938::INFO: =A0Started SslSocketConnector@0.0.0.0:6201=
0
> INFO =A0- TransportConnector =A0 =A0 =A0 =A0 - Connector
> https://0.0.0.0:62010?trace=3Dtrue Started
> 2010-02-02 15:47:10.939::WARN: =A0EXCEPTION
> javax.net.ssl.SSLException: No available certificate or key corresponds t=
o
> the SSL cipher suites which are enabled.
> =A0 =A0 =A0 =A0at
> com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(SSLSe=
rverSocketImpl.java:307)
> =A0 =A0 =A0 =A0at
> com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept(SSLServerSocketIm=
pl.java:253)
> =A0 =A0 =A0 =A0at
> org.mortbay.jetty.security.SslSocketConnector.accept(SslSocketConnector.j=
ava:172)
> =A0 =A0 =A0 =A0at
> org.mortbay.jetty.AbstractConnector$Acceptor.run(AbstractConnector.java:7=
07)
> =A0 =A0 =A0 =A0at
> org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:=
488)
> jetty.ssl.password :

Have you imported the CA certs into the correct keystore? I've
experienced this problem myself in the past. Also make sure that the
private key is in the keystore, not just the public key.

Also, take a look at the instructions here:

http://activemq.apache.org/how-do-i-use-ssl.html

When I've had problems in the past with SSL, reading through these has help=
ed.

Bruce
--=20
perl -e 'print unpack("u30","D0G)U8V4\@4VYY9&5R\"F)R=3D6-E+G-N>61E<D\!G;6%I=
;\"YC;VT*"
);'

ActiveMQ in Action: http://bit.ly/2je6cQ
Blog: http://bruceblog.org/
Twitter: http://twitter.com/brucesnyder