[rabbitmq-discuss] [RUBY AMPQ] SSL LOGIN ERROR EXTERNAL login refused
Loganathan Sellapa
loganathan.ms at gmail.com
Tue Apr 29 09:54:33 BST 2014
Hi Michael,
I followed the steps mentioned in the rabbitMq website. And I hope I have
separate certificates for client & server.
root at ubuntu:/opt/ssl/client# ls
cert.pem keycert.p12 key-cert.pem key.pem req.pem
root at ubuntu:/opt/ssl/server# ls
cert.pem keycert.p12 key.pem req.pem
regards,
Loganathan
Mob: +91 7760780741 | +91 9944414388
Skype: loganathan.sellappa
ViewMe <http://vizualize.me/loganathan>
On Tue, Apr 29, 2014 at 1:48 PM, Michael Klishin <mklishin at gopivotal.com>wrote:
> On 29 April 2014 at 12:08:34, Loganathan Sellapa (loganathan.ms at gmail.com)
> wrote:
> > > I tried to setup SSL onmy development machine by following the
> > instructions provided in https://www.rabbitmq.com/ssl.html.
> > And then created rabbitmq.cong file with the below settings.
> >
> > [
> > {rabbit, [
> > {ssl_listeners, [5671]},
> > {ssl_options, [{cacertfile,"/opt/ssl/testca/cacert.pem"},
> > {certfile,"/opt/ssl/server/cert.pem"},
> > {keyfile,"/opt/ssl/server/key.pem"},
> > {verify,verify_peer},
> > {fail_if_no_peer_cert,true}]},
> > {auth_mechanisms, ['EXTERNAL']},
> > {ssl_cert_login_from, common_name}
> > ]}
> > ].
> >
> > After restarting the rabbitmq server I tried to connect to RabbitMq
> > via AMQP Gem with the below code, but I am getting authentication
> > failure error.
> >
> > RUBY CODE:
> >
> > RMQ_CONFIGURATIONS = {:host=>"127.0.0.1", :port=>5671,
> > :vhost=>"/", :auth_mechanism=>"EXTERNAL",
> :ssl=>{:cert_chain_file=>"/opt/ssl/client/cert.pem",
> > :private_key_file=>"/opt/ssl/client/key.pem"}}
>
> Do your RabbitMQ server and client actually use different CA certificate
> files
> or is this a typo?
> --
> MK
>
> Software Engineer, Pivotal/RabbitMQ
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20140429/6517515e/attachment.html>
More information about the rabbitmq-discuss
mailing list