[rabbitmq-discuss] C# client connect using SSL

[michael.thorsoe at schneider-electric.com]

I tried the instruction page you suggested but it's still not clear to me.

I just want to do the SSL connection and trust the server certificate 
without having to do any additional certificate installation on the 
clients side. Is that possible?

We have the server running SSL and some java clients connecting using SSL 
just by setting the  useSslProtocol() in the Java client.

Thereby I can see the server is installed correctly and accepting Java SSL 
clients to connect.

On the instruction page it states that:
"In contrast to the Java client, which is happy to use an SSL connection 
without verifying the server's certificate, the .NET client by default 
requires this verification to succeed. To suppress verification, an 
application can set the 
System.Net.Security.SslPolicyErrors.RemoteCertificateNotAvailable and 
System.Net.Security.SslPolicyErrors.RemoteCertificateChainErrors flags in 
SslOption.AcceptablePolicyErrors "

But when I do like this
ConnectionFactory cf = new ConnectionFactory();
cf.Ssl.Enabled = true;
cf.Ssl.AcceptablePolicyErrors = 
System.Net.Security.SslPolicyErrors.RemoteCertificateNotAvailable | 
System.Net.Security.SslPolicyErrors.RemoteCertificateNameMismatch;

I'm still not able to connect!


Br,
Michael Thorsoe
Br,
Michael Thorsoe



From:   Emile Joubert <emile at rabbitmq.com>
To:     Discussions about RabbitMQ <rabbitmq-discuss at lists.rabbitmq.com>, 
Cc:     Michael Thorsoe/DK/Schneider at Europe
Date:   04-11-2013 13:38
Subject:        Re: [rabbitmq-discuss] C# client connect using SSL




Hi Michael,

On 04/11/13 11:57, michael.thorsoe at schneider-electric.com wrote:

> Is it possible to connect to a server by just setting the Ssl.Enabled =
> trueand not have to install any certificates on the windows client?


I believe you have to follow all the instructions here:
http://www.rabbitmq.com/ssl.html#configuring-dotnet




-Emile




______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
______________________________________________________________________

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20131104/7663cc60/attachment.htm>