Mailing-List: contact users-help@qpid.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@qpid.apache.org
Date: Wed, 27 Jan 2016 17:51:40 -0500 (EST)
From: Chuck Rolke <crolke@redhat.com>
To: users@qpid.apache.org
Message-ID: <1581386439.16705027.1453935100602.JavaMail.zimbra@redhat.com>
In-Reply-To: 
 <CAL1zMnMX35KUug8+nCa_wTsbYRhJ2vsmAd6Vo+gELOfJvdu-GQ@mail.gmail.com>
References: 
 <CAL1zMnMX35KUug8+nCa_wTsbYRhJ2vsmAd6Vo+gELOfJvdu-GQ@mail.gmail.com>
Subject: Re: ssl not working
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Thread-Topic: ssl not working
Thread-Index: jstTx8KoxBFpuU3Frjbv3J+10mOykQ==

On both the broker and client end you can get some information from logging.

export QPID_LOG_ENABLE=trace+
then qpidd and qpid-send

----- Original Message -----
> From: "jjw tectec" <jjw.tectec@gmail.com>
> To: users@qpid.apache.org
> Sent: Wednesday, January 27, 2016 5:02:24 PM
> Subject: ssl not working
> 
> I'm trying to add encryption, but couldn't get things to work.
> 
> I've done the following (for a single broker scenario):
> 
> 1) Ran the following script to create a certificate database:
> mkdir ${CERT_DIR}
> certutil -N -d ${CERT_DIR} -f ${CERT_PW_FILE}
> certutil -S -d ${CERT_DIR} -n ${NICKNAME} -s "CN=${NICKNAME}" -t "CT,," -x
> -f ${CERT_PW_FILE} -z /usr/bin/certutil
> 
> 2) in qpidd.conf:
> require-encryption=yes
> ssl-cert-db=${CERT_DIR}
> ssl-cert-password-file=${CERT_PW_FILE}
> ssl-cert-name=${NICKNAME}
> ssl-port=5671
> 
> However, when running the following:
> qpid-send -b localhost:5671 -a 'TestQueue; {node:{type:queue}}'
> --content-string "hello" --connection-options
> "{transport:ssl,protocol:amqp1.0}"
> I got "*qpid-send: Connect failed to amqp:ssl:localhost:5671: Reconnect
> disabled*"
> 
> What am I missing?
> 
> Thanks,
> 
> jjw
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
For additional commands, e-mail: users-help@qpid.apache.org