Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 782FC200CB6 for ; Thu, 29 Jun 2017 19:54:54 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 77891160BED; Thu, 29 Jun 2017 17:54:54 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 050B8160BC6 for ; Thu, 29 Jun 2017 19:54:52 +0200 (CEST) Received: (qmail 23999 invoked by uid 500); 29 Jun 2017 17:54:52 -0000 Mailing-List: contact users-help@activemq.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@activemq.apache.org Delivered-To: mailing list users@activemq.apache.org Received: (qmail 23986 invoked by uid 99); 29 Jun 2017 17:54:51 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 29 Jun 2017 17:54:51 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 67BF81A076C for ; Thu, 29 Jun 2017 17:54:51 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.545 X-Spam-Level: *** X-Spam-Status: No, score=3.545 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URI_HEX=1.313, URI_TRY_3LD=0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id nmt3sL0eSrqk for ; Thu, 29 Jun 2017 17:54:50 +0000 (UTC) Received: from mail-ua0-f180.google.com (mail-ua0-f180.google.com [209.85.217.180]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id ECF295F299 for ; Thu, 29 Jun 2017 17:54:49 +0000 (UTC) Received: by mail-ua0-f180.google.com with SMTP id w19so40957465uac.0 for ; Thu, 29 Jun 2017 10:54:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=7WX8rxGjx7ataF9TCxQTeLiOE/jGrB0a9uuLr4BN+wU=; b=N8Pg8/pNbUKiPEtip4cktFSuvLCaGrxK6jOel/s8yPETxWtHZb0kSzOrSvZESkdnft 5jcn606bmb/stjjLSiIF/PkWFpyd04vXkVcgBeXKGsIqszbpC6e1UYe31Yce8tLDcsHM D0nN+qt/WD7cH8IHBWdGRKztvkiqGiYsjLmU/ONYg2pxaElmjmlIwigCL5f++1EaC05R lkSNwLRqvyRN1qJw6Gp7m6ukvk8UuzVFqFFpmw44oUWTckJKvfKXudo/zv7j698ui28B 44t6axk7y7CCTQlTa/RNh6WN/OnvHD6J4Uorm5MOo4PkNw2wa2wYXPaTyfmlLEUwCJVl vueQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=7WX8rxGjx7ataF9TCxQTeLiOE/jGrB0a9uuLr4BN+wU=; b=I+GFv7RWJrLurI7Xp3JgRTwJiIRPYjI9ASHq9HdM+pKdlOqAB7kIFC31BYtH8wW3iG z9DyDWdamgA5O4McOC+YZ3Ry5oBdRkprpzADRgdhjR8Z2mDmgz+P+VW+AQsahqDMvZa4 ii+2mxy7KcMxFUoQtrBuKJ4Ts2UbkIAIqk4swA2hR3pUk/RDR2+HcrawXqc5L0FtvEbL 7jQ5sYMG3M4bwrQVg3RSIxB3ORLqBCdUqCf8nQwwuB8TaTQw59mqdPaN4k2uROq2E4QU dXHC6CiEma7ie/9Tzd4urxh95cjmvG9hiWQncvJPtRmi9ZqMyAHxfGU/Czp/A6sTwgzL R6hg== X-Gm-Message-State: AKS2vOwqNtc9JTGIMS9KMFVonBEb+8sPILYqPqonPeek+339UVObluNb TyqWThqcjN7ub5CFe/4evC9xP8M3Ew== X-Received: by 10.176.2.116 with SMTP id 107mr10138394uas.111.1498758889489; Thu, 29 Jun 2017 10:54:49 -0700 (PDT) MIME-Version: 1.0 Sender: tbain98@gmail.com Received: by 10.103.119.205 with HTTP; Thu, 29 Jun 2017 10:54:48 -0700 (PDT) Received: by 10.103.119.205 with HTTP; Thu, 29 Jun 2017 10:54:48 -0700 (PDT) In-Reply-To: References: <1498647750414-4727995.post@n4.nabble.com> <1498727660961-4728050.post@n4.nabble.com> From: Tim Bain Date: Thu, 29 Jun 2017 11:54:48 -0600 X-Google-Sender-Auth: L8Wj1T3TgUtOsJdd71JB8fb4fZU Message-ID: Subject: Re: Cannot setup secure web sockets with activemq mqtt To: ActiveMQ Users Content-Type: multipart/alternative; boundary="001a113e45d4364a9605531cffc3" archived-at: Thu, 29 Jun 2017 17:54:54 -0000 --001a113e45d4364a9605531cffc3 Content-Type: text/plain; charset="UTF-8" Sorry, I just noticed your second response. I'm glad you got it working. On Jun 29, 2017 10:53 AM, "Tim Bain" wrote: > > > On Jun 29, 2017 2:32 AM, "itsebriy" wrote: > > I am using a self-signed certificate which I created with keytool. > > > That doesn't answer the question of whether your browser trusts it. If you > haven't done anything to make the browser trust the cert, then it doesn't, > which is why you're getting this error. > > Also when going to production, will self-signed certificate be sufficient? > We could use a certificate from certificate authority but the domain for > every customer will be different. > > > Only you can answer whether it's sufficient. If you can get each of your > users to import your self-signed cert into your browser without objections, > it might be sufficient. If they refuse, it's probably not. > > And I hope you don't plan to deploy a single cert (self-signed or > otherwise) to multiple customer deployments. Your comment about domains > sounds like you might be planning on doing that, and 1) it won't work, and > 2) it's an awful thing to do even if it would work. > > Tim > > > > -- > View this message in context: http://activemq.2283324.n4.nab > ble.com/Cannot-setup-secure-web-sockets-with-activemq- > mqtt-tp4727995p4728050.html > Sent from the ActiveMQ - User mailing list archive at Nabble.com. > > > --001a113e45d4364a9605531cffc3--