Return-Path: X-Original-To: apmail-qpid-users-archive@www.apache.org Delivered-To: apmail-qpid-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 3AF9810086 for ; Wed, 23 Oct 2013 15:02:34 +0000 (UTC) Received: (qmail 10222 invoked by uid 500); 23 Oct 2013 15:02:32 -0000 Delivered-To: apmail-qpid-users-archive@qpid.apache.org Received: (qmail 10207 invoked by uid 500); 23 Oct 2013 15:02:32 -0000 Mailing-List: contact users-help@qpid.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@qpid.apache.org Delivered-To: mailing list users@qpid.apache.org Received: (qmail 10170 invoked by uid 99); 23 Oct 2013 15:02:31 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Oct 2013 15:02:31 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy includes SPF record at spf.trusted-forwarder.org) Received: from [209.85.160.42] (HELO mail-pb0-f42.google.com) (209.85.160.42) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Oct 2013 15:02:25 +0000 Received: by mail-pb0-f42.google.com with SMTP id jt11so893331pbb.1 for ; Wed, 23 Oct 2013 08:02:04 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=a2Px5jmgEeGyv9jkyfLskCMO4E5DW+7Vc9eeJbKrUqM=; b=mezYHvLXop3Rz0kAkjgjbgYCQEWIksyibb3DQcnFlq/ZciBhTtpWBsSwUObkwGPN2V ir8JO7tkVodKF7LfPqo2FAcF9aYlcWOjQ8SQBhO51SN02zDMg+yIxtYoLUqKbm/8DQb0 kssoghUNHZMuCul58Z+7w/0R2os2OgKuZUfj7OJxN/IUsR01bQ6RuNx+3qulb8t4136h NaQNQfcblkl82+Zwijm41PR9yql/qGQMtzb77da9AysAzOpdlkWIws6AUZcIDXlGQRcK gPLy2SKFdRz7FNqo1Ado2nQtSc7fainw77jabN+68fBB29b6dURED8QV78kiXDePRLpy rXFg== X-Gm-Message-State: ALoCoQmkTLL2uSAvCQLmw+FL3cXNO7A3xD7ZTSf5nbz6aGghVF2fTU6K2fx0q6SoKu+4+A9+t44q MIME-Version: 1.0 X-Received: by 10.68.224.38 with SMTP id qz6mr2101293pbc.156.1382540524013; Wed, 23 Oct 2013 08:02:04 -0700 (PDT) Received: by 10.70.39.99 with HTTP; Wed, 23 Oct 2013 08:02:03 -0700 (PDT) In-Reply-To: <5267D6C8.7090406@redhat.com> References: <5267A111.2000900@redhat.com> <5267D6C8.7090406@redhat.com> Date: Wed, 23 Oct 2013 11:02:03 -0400 Message-ID: Subject: Re: QPid Ruby client and SSL From: Trevor Vaughan To: users@qpid.apache.org Content-Type: multipart/alternative; boundary=047d7b160513d25e8704e969cc2e X-Virus-Checked: Checked by ClamAV on apache.org --047d7b160513d25e8704e969cc2e Content-Type: text/plain; charset=ISO-8859-1 amqp:ssl:myhost.mydomain:5671 options << transport => 'ssl' But, no dice :-/ Thanks for the help though! Trevor On Wed, Oct 23, 2013 at 10:01 AM, Gordon Sim wrote: > On 10/23/2013 01:36 PM, Trevor Vaughan wrote: > >> Thanks for getting back to me. >> >> The C++ broker is working fine, I can use the Python code to connect to >> the >> broker over SSL with no issues whatsoever. >> >> Unfortunately, the Ruby client code isn't behaving so well. >> >> The client DB only has the list of trusted CA's with the TC flags set >> since >> I'm not trying to use client certificates. >> >> I did use the FQDN, DNS works properly, and I am going to port 5671. >> > > Sorry for all the stupid questions then ;-) Just one more... > > What url are you giving to the ruby client to tell it to use ssl? It > doesn't recognise the 'amqps' scheme the python client uses. However you > can use ssl:myhost.mydomain:5671 to indicate that ssl should be used, or > indeed set a connection level option for 'transport' to 'ssl' (not exactly > sure how you do that in ruby). > > > ------------------------------**------------------------------**--------- > To unsubscribe, e-mail: users-unsubscribe@qpid.apache.**org > For additional commands, e-mail: users-help@qpid.apache.org > > -- Trevor Vaughan Vice President, Onyx Point, Inc (410) 541-6699 tvaughan@onyxpoint.com -- This account not approved for unencrypted proprietary information -- --047d7b160513d25e8704e969cc2e--