Return-Path: X-Original-To: apmail-qpid-users-archive@www.apache.org Delivered-To: apmail-qpid-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 284ED108D9 for ; Wed, 9 Oct 2013 14:18:45 +0000 (UTC) Received: (qmail 61972 invoked by uid 500); 9 Oct 2013 14:18:44 -0000 Delivered-To: apmail-qpid-users-archive@qpid.apache.org Received: (qmail 61947 invoked by uid 500); 9 Oct 2013 14:18:44 -0000 Mailing-List: contact users-help@qpid.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@qpid.apache.org Delivered-To: mailing list users@qpid.apache.org Received: (qmail 61938 invoked by uid 99); 9 Oct 2013 14:18:43 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Oct 2013 14:18:43 +0000 X-ASF-Spam-Status: No, hits=-5.0 required=5.0 tests=RCVD_IN_DNSWL_HI,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of gsim@redhat.com designates 209.132.183.28 as permitted sender) Received: from [209.132.183.28] (HELO mx1.redhat.com) (209.132.183.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Oct 2013 14:18:39 +0000 Received: from int-mx10.intmail.prod.int.phx2.redhat.com (int-mx10.intmail.prod.int.phx2.redhat.com [10.5.11.23]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id r99EII0T018962 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Wed, 9 Oct 2013 10:18:18 -0400 Received: from [10.36.116.86] (ovpn-116-86.ams2.redhat.com [10.36.116.86]) by int-mx10.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id r99EIGKR032082 for ; Wed, 9 Oct 2013 10:18:17 -0400 Message-ID: <525565F2.8020603@redhat.com> Date: Wed, 09 Oct 2013 15:19:30 +0100 From: Gordon Sim Organization: Red Hat UK Ltd, Registered in England and Wales under Company Registration No. 3798903, Directors: Michael Cunningham (USA), Matt Parsons (USA), Charlie Peters (USA), Paul Hickey (Ireland) User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130625 Thunderbird/17.0.7 MIME-Version: 1.0 To: users@qpid.apache.org Subject: Re: qpid startup: error Failed to initialise SSL plugin: Failed to load certificate 'Server-Cert' References: <0DA637E5-D669-4346-9F90-5F342EC0EBB1@sharp.fm> <637AFB0E-D18F-4FA0-86B0-943A608400F4@sharp.fm> In-Reply-To: <637AFB0E-D18F-4FA0-86B0-943A608400F4@sharp.fm> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.68 on 10.5.11.23 X-Virus-Checked: Checked by ClamAV on apache.org On 10/09/2013 02:42 PM, Graham Leggett wrote: > On 09 Oct 2013, at 3:27 PM, Graham Leggett wrote: > >> Oct 9 13:15:29 localhost qpidd[17764]: 2013-10-09 13:15:29 error Failed to initialise SSL plugin: Failed to load certificate 'Server-Cert' (qpid/sys/ssl/SslSocket.cpp:184) > >> "Server-Cert" u,u,u > > The cause of the problem was found - the nickname in the NSS certificate database had quotes around it. > > Is it possible to improve the error message to explicitly say the certificate was not found? I'm not sure... The NSS function 'PK11_FindCertFromNickname' is called, which returns the certificate if successful or NULL if 'unsuccessful'. My assumption was there might be other reasons for not being able to retrieve it, hence the more ambiguous error message. I'm not sure if there is some other way of getting more details on why it was 'unsuccessful'. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org For additional commands, e-mail: users-help@qpid.apache.org