[rabbitmq-discuss] Hostname Verification for SSL connections

Thu May 1 18:50:11 BST 2014

Hi,

My clients connect to RMQ using mutual ssl authentication using
rabbitmq-auth-mechanism-ssl plugin.
I would like my client to do hostname verification while accepting the SSL
connection from the server.

The code example in the RabbitMQ SSL documentation allows the server to use
any CN. For example, the server certificate could be CN=SomeHost.com and the
client could be connecting to amqps://someIpWhichResolvesTo.SomeHost.com and
yet, the connection would succeed.

Has anyone been able to configure the client with a HostnameVerifier ?
http://docs.oracle.com/javase/7/docs/api/javax/net/ssl/HostnameVerifier.html

Thanks.

--
View this message in context: http://rabbitmq.1065348.n5.nabble.com/Hostname-Verification-for-SSL-connections-tp35278.html
Sent from the RabbitMQ mailing list archive at Nabble.com.