From users-return-3777-apmail-qpid-users-archive=qpid.apache.org@qpid.apache.org Mon Feb 07 21:56:30 2011 Return-Path: Delivered-To: apmail-qpid-users-archive@www.apache.org Received: (qmail 36192 invoked from network); 7 Feb 2011 21:56:30 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 7 Feb 2011 21:56:30 -0000 Received: (qmail 57219 invoked by uid 500); 7 Feb 2011 21:56:29 -0000 Delivered-To: apmail-qpid-users-archive@qpid.apache.org Received: (qmail 57182 invoked by uid 500); 7 Feb 2011 21:56:29 -0000 Mailing-List: contact users-help@qpid.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@qpid.apache.org Delivered-To: mailing list users@qpid.apache.org Received: (qmail 57174 invoked by uid 99); 7 Feb 2011 21:56:29 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 07 Feb 2011 21:56:29 +0000 X-ASF-Spam-Status: No, hits=3.7 required=5.0 tests=FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of rajith77@gmail.com designates 209.85.160.170 as permitted sender) Received: from [209.85.160.170] (HELO mail-gy0-f170.google.com) (209.85.160.170) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 07 Feb 2011 21:56:24 +0000 Received: by gyf2 with SMTP id 2so2999454gyf.15 for ; Mon, 07 Feb 2011 13:56:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=uMPb2FsTM0vTg0MWUVxdA6xtrz6Wsdt3a7l2QJbUgxE=; b=H26oMDlTnHCH9775WWU5esedeVzdrh+Fx7PtDJ11JnxWkskRN/oz5xOVQZUGbiWRZn kDAa95fMaD6vGZzcDiasAaRB44pOOzUlflc/XCfPy7Vwkxe0zvueTL8B1ZdGH0VzhBWK 4AMG/Nb7ECy8r82vHTfJJAhplHPwHUSv/q9W8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=nPmhtGuawUaCPAjz8yC8KNoDR4jnQ8O0OqXX7rOBcnAg5JU2B1eriDjnqWuo7UEq6A WsnS4G5JFmkenigP8CJ2ahNdVavGyvWzr78udSri0q5bmVcw7KD5bMY/kymYLxAqkS8u qfv7xlXuFmmXIYYiGFBWFxJcHSytdBO11njn8= MIME-Version: 1.0 Received: by 10.236.111.13 with SMTP id v13mr2930910yhg.37.1297115762959; Mon, 07 Feb 2011 13:56:02 -0800 (PST) Received: by 10.236.110.17 with HTTP; Mon, 7 Feb 2011 13:56:02 -0800 (PST) In-Reply-To: References: Date: Mon, 7 Feb 2011 16:56:02 -0500 Message-ID: Subject: Re: Timed out occurs when connecting to Java broker over SSL From: Rajith Attapattu To: users@qpid.apache.org Content-Type: multipart/alternative; boundary=002354867c6e48adc5049bb84c9d --002354867c6e48adc5049bb84c9d Content-Type: text/plain; charset=ISO-8859-1 On Sun, Feb 6, 2011 at 9:36 AM, Rajika Kumarasiri wrote: > I have configured a sample Java Qpid client talk to Qpid java broker ( 0.9) > over SSL. I have provided the required keystore/truststore files and the > required passwords correctly. When the client tries to connect to the > broker > it receives the following timed out error. I try increasing the time out ( > by increasing the a value to the system property qpid.ssl_timeout) of the > SSLSender but that didn't help. Any help is greatly appreciated. I am > looking into the javax.net.debug logs right now, if you think that'll help > I can post them as well. > Is there any other kind of logging that I can enable to get more > information > ? > Have you got the SSL certificates setup properly ? You could try the following tutorial to see if you got the certificates setup properly. http://rajith.2rlabs.com/2010/03/01/apache-qpid-securing-connections-with-ssl/ Unfortunately the tutorial uses the c++ broker as the server. I haven't really tried the Java broker, so not sure if there are differences, but it's worth a try to figure out if your certificates are in order. > > BTW, I also notice that the keystore file and the keystore password given > through the connection url actually transmitted into the truststore > file+password combination, so I had to pass keystore file and the password > as system properties. > I will fix this issue. > > Rajika > > > [2011-02-06 20:02:56,327] ERROR > {org.apache.axis2.transport.base.threads.NativeWorkerPool} - Uncaught > exception > org.apache.axis2.transport.jms.AxisJMSException: Error acquiring a JMS > connection to : QueueConnectionFactory using JNDI properties : > > {java.naming.factory.initial=org.apache.qpid.jndi.PropertiesFileInitialContextFactory, > transport.jms.Password=admin, > java.naming.provider.url=repository/conf/csg-qpid.properties, > > transport.jms.ConnectionFactory=SimpleStockQuoteServiceQueueConnectionFactory, > transport.jms.UserName=admin, transport.jms.ConnectionFactoryType=queue, > ServiceClass=samples.services.SimpleStockQuoteService} > at > > org.apache.axis2.transport.jms.ServiceTaskManager.handleException(ServiceTaskManager.java:980) > at > > org.apache.axis2.transport.jms.ServiceTaskManager.access$700(ServiceTaskManager.java:50) > at > > org.apache.axis2.transport.jms.ServiceTaskManager$MessageListenerTask.createConnection(ServiceTaskManager.java:815) > at > > org.apache.axis2.transport.jms.ServiceTaskManager$MessageListenerTask.getConnection(ServiceTaskManager.java:686) > at > > org.apache.axis2.transport.jms.ServiceTaskManager$MessageListenerTask.receiveMessage(ServiceTaskManager.java:484) > at > > org.apache.axis2.transport.jms.ServiceTaskManager$MessageListenerTask.run(ServiceTaskManager.java:412) > at > > org.apache.axis2.transport.base.threads.NativeWorkerPool$1.run(NativeWorkerPool.java:173) > at > > java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886) > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908) > at java.lang.Thread.run(Thread.java:619) > Caused by: javax.jms.JMSException: Error creating connection: SSL Engine > timed out waiting for a response.To get more info,run with > -Djavax.net.debug=ssl > at > > org.apache.qpid.client.AMQConnectionFactory.createConnection(AMQConnectionFactory.java:326) > at > > org.apache.qpid.client.AMQConnectionFactory.createConnection(AMQConnectionFactory.java:297) > at > org.apache.axis2.transport.jms.JMSUtils.createConnection(JMSUtils.java:552) > at > > org.apache.axis2.transport.jms.ServiceTaskManager$MessageListenerTask.createConnection(ServiceTaskManager.java:804) > ... 7 more > Caused by: org.apache.qpid.AMQConnectionFailureException: SSL Engine timed > out waiting for a response.To get more info,run with -Djavax.net.debug=ssl > at org.apache.qpid.client.AMQConnection.(AMQConnection.java:620) > at > > org.apache.qpid.client.AMQConnectionFactory.createConnection(AMQConnectionFactory.java:317) > ... 10 more > Caused by: org.apache.qpid.transport.SenderException: SSL Engine timed out > waiting for a response.To get more info,run with -Djavax.net.debug=ssl > at > > org.apache.qpid.transport.network.security.ssl.SSLSender.send(SSLSender.java:227) > at > > org.apache.qpid.transport.network.security.ssl.SSLSender.send(SSLSender.java:36) > at > org.apache.qpid.transport.network.Disassembler.init(Disassembler.java:158) > at > org.apache.qpid.transport.network.Disassembler.init(Disassembler.java:49) > at > org.apache.qpid.transport.ProtocolHeader.delegate(ProtocolHeader.java:105) > at > org.apache.qpid.transport.network.Disassembler.send(Disassembler.java:81) > at > org.apache.qpid.transport.network.Disassembler.send(Disassembler.java:49) > at org.apache.qpid.transport.Connection.send(Connection.java:360) > at org.apache.qpid.transport.Connection.connect(Connection.java:238) > at > > org.apache.qpid.client.AMQConnectionDelegate_0_10.makeBrokerConnection(AMQConnectionDelegate_0_10.java:164) > at > > org.apache.qpid.client.AMQConnection.makeBrokerConnection(AMQConnection.java:761) > at org.apache.qpid.client.AMQConnection.(AMQConnection.java:547) > ... 11 more > -- Regards, Rajith Attapattu Red Hat http://rajith.2rlabs.com/ --002354867c6e48adc5049bb84c9d--