Return-Path: X-Original-To: apmail-qpid-users-archive@www.apache.org Delivered-To: apmail-qpid-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id CCBDC7101 for ; Tue, 4 Oct 2011 22:36:42 +0000 (UTC) Received: (qmail 18310 invoked by uid 500); 4 Oct 2011 22:36:42 -0000 Delivered-To: apmail-qpid-users-archive@qpid.apache.org Received: (qmail 18286 invoked by uid 500); 4 Oct 2011 22:36:42 -0000 Mailing-List: contact users-help@qpid.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@qpid.apache.org Delivered-To: mailing list users@qpid.apache.org Received: (qmail 18278 invoked by uid 99); 4 Oct 2011 22:36:42 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 04 Oct 2011 22:36:42 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [187.16.23.97] (HELO mta65.f1.k8.com.br) (187.16.23.97) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 04 Oct 2011 22:36:36 +0000 Received: from localhost (localhost [127.0.0.1]) by smtpl.f1.k8.com.br (Postfix) with ESMTP id 8B9C5200A3E3 for ; Tue, 4 Oct 2011 22:36:14 +0000 (GMT) X-Virus-Scanned: amavisd-new at k8.com.br Received: from smtpl.f1.k8.com.br ([127.0.0.1]) by localhost (mta65.f1.k8.com.br [127.0.0.1]) (amavisd-new, port 10024) with LMTP id G4PTIpJ0tBGs for ; Tue, 4 Oct 2011 22:36:14 +0000 (GMT) Received: from [10.7.5.19] (fosforo.f2.k8.com.br [200.150.156.10]) by smtpl.f1.k8.com.br (Postfix) with ESMTPA id 7487D200A069 for ; Tue, 4 Oct 2011 22:36:14 +0000 (GMT) Message-ID: <4E8B8A5E.4070700@digirati.com.br> Date: Tue, 04 Oct 2011 19:36:14 -0300 From: =?ISO-8859-1?Q?Bruno_Fran=E7a?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:7.0) Gecko/20110917 Thunderbird/7.0 MIME-Version: 1.0 To: users@qpid.apache.org Subject: Qpid-tools and SSL certificates Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Hi, when I set ssl-require-client-authentication and require-encryption on my Qpid C++ broker and try to connect to it using qpid-stat, I get the following error: $ export QPID_SSL_CERT_DB=/path/to/mycert_db $ export QPID_SSL_CERT_NAME=mycert $ ./bin/qpid-stat -q amqps://bruno.mz.digirati.com.br Failed: SSLError - [Errno 1] _ssl.c:499: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate Seems like the client certificate is being ignored. Is there a way to inform qpid-stat which certificate to use? The above command works if I disable ssl-require-client-authentication. I'm using SVN rev 1177431 on Ubuntu 11.04 x86_64. Regards, Bruno Fran�a. --------------------------------------------------------------------- Apache Qpid - AMQP Messaging Implementation Project: http://qpid.apache.org Use/Interact: mailto:users-subscribe@qpid.apache.org