Emile,<div><br></div><div>Thank you for the response. I tried all the steps from SSL troubleshoot document. </div><div><span style="background-color:rgb(255,255,255);color:rgb(255,102,0);font-family:Helvetica,Arial,sans-serif;font-size:1.2em;line-height:18px;text-align:left"><br>
</span></div><div style="text-align:-webkit-auto"><span style="background-color:rgb(255,255,255);text-align:left">In </span><span style="background-color:rgb(255,255,255);color:rgb(255,102,0);font-family:Helvetica,Arial,sans-serif;font-size:1.2em;line-height:18px;text-align:left">SSL connection to broker</span></div>
<div><div><br></div><div>when I make a connection, connection gets closed after a couple of seconds. I tried sending 8 bytes my response is a string AMQP and it closes the connection immediately.</div><div><br></div><div>
Copied by response.</div><div><br></div><div><div>openssl s_client -connect localhost:5671 -cert client/cert.pem -key client/key.pem -CAfile testca/cacert.pem</div><div>CONNECTED(00000003)</div><div>depth=1 CN = MyTestCA</div>
<div>verify return:1</div><div>depth=0 CN = Core28, O = server</div><div>verify return:1</div><div>---</div><div>Certificate chain</div><div> 0 s:/CN=Core28/O=server</div><div> i:/CN=MyTestCA</div><div> 1 s:/CN=MyTestCA</div>
<div> i:/CN=MyTestCA</div><div>---</div><div>Server certificate</div><div>-----BEGIN CERTIFICATE-----</div><div>MIIC4TCCAcmgAwIBAgIBATANBgkqhkiG9w0BAQUFADATMREwDwYDVQQDEwhNeVRl</div><div>c3RDQTAeFw0xMjA3MTMxMzE0MDFaFw0xMzA3MTMxMzE0MDFaMCQxETAPBgNVBAMM</div>
<div>CEdYQ29yZTI4MQ8wDQYDVQQKDAZzZXJ2ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IB</div><div>DwAwggEKAoIBAQDBQpQ/dR8Aim9qqP2EfxStf+F6rME4soPxjY0PzFUzXKslNkTl</div><div>hCeoRSElnpOKwqK16SzOr2N9HNxivkqjmCvB3WSwqf6LT1gRuVzCB36zwD2dOIZ1</div>
<div>5JU4JWtAcpNZMhwMLkReE1h3L5UBXSjqKhpyuKdYqWKTMzFJiu28WFOLS/XMz6K2</div><div>Y9gk5O7zWu5AcJyJssr2xMisoNFmq5USfHkt5UWoHd3YzReUfxZmjhzSRT9TRvBY</div><div>NIlNm41JljtXBea9sITIuGq8eSgvO87+N70uSRcuXBCk9fn5S8I0TUh+4bUVnP8F</div>
<div>Ryg/uSO+WkNeOzjYUpaBAR/4v2UQTl4QlkgTAgMBAAGjLzAtMAkGA1UdEwQCMAAw</div><div>CwYDVR0PBAQDAgUgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBBQUA</div><div>A4IBAQCI41d129BaDyzihtGH6yu0dOT9mT0U1Mv5FcBTERmYsyn+Adjmo/+jF9HZ</div>
<div>Q3m1Wc7hV30nSnhJPUKV8dgDPKUNt4Mj3ZRsPZUEFv128rbkk9der+t3Z1tYKcrX</div><div>0HiYNqdsKyuhXUB8P4g1TW0t/pLhvsO734+eQDtjmi//K4AevS/hz+9cVhx9Asrk</div><div>ca/EdIw+xtRxNFbGCACZW8CUlP24z7YL3QYbZA44H9jKMHNN0vwkeJ4nDiby0ySJ</div>
<div>FX5xDWMksSON636pachSqMzZL8dj3ijTfBEV7jLeH/fYkcK8K0rzzZVFhVrBnK+O</div><div>k/Uc5ZRhf9E5F9U3cLy0f7Br2eFp</div><div>-----END CERTIFICATE-----</div><div>subject=/CN=Core28/O=server</div><div>issuer=/CN=MyTestCA</div><div>
---</div><div>Acceptable client certificate CA names</div><div>/CN=MyTestCA</div><div>---</div><div>SSL handshake has read 1663 bytes and written 2179 bytes</div><div>---</div><div>New, TLSv1/SSLv3, Cipher is AES256-SHA</div>
<div>Server public key is 2048 bit</div><div>Secure Renegotiation IS supported</div><div>Compression: NONE</div><div>Expansion: NONE</div><div>SSL-Session:</div><div> Protocol : TLSv1</div><div> Cipher : AES256-SHA</div>
<div> Session-ID: 60281E9B3DA64177D15C7DC4E0F2C5467A76170ADFFF9C23C9A6AFEE3F8D5129</div><div> Session-ID-ctx:</div><div> Master-Key: 4111FDE14CC847C17445136C3057CBBDB5D23752AF61F2481BB6F259CBAE94C75E23FE85F20E83E12AD1EA3674709FDB</div>
<div> Key-Arg : None</div><div> Krb5 Principal: None</div><div> PSK identity: None</div><div> PSK identity hint: None</div><div> Start Time: 1342449654</div><div> Timeout : 300 (sec)</div><div> Verify return code: 0 (ok)</div>
<div>---</div><div>closed</div></div><div><br></div><div>Thanks,</div><div>Prashanth.</div><br><div class="gmail_quote">On Fri, Jul 13, 2012 at 10:14 AM, Emile Joubert <span dir="ltr"><<a href="mailto:emile@rabbitmq.com" target="_blank">emile@rabbitmq.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<div class="im"><br>
On 13/07/12 15:02, Prashanth wrote:<br>
> I get a message Logging in: (end-of-stream)<br>
> connecting to server fails.<br>
<br>
</div>It is challenging to assist here, given how little information you have<br>
provided. As a first step could you try to verify your setup using the<br>
troubleshooting steps outlined here:<br>
<br>
<a href="http://www.rabbitmq.com/troubleshooting-ssl.html" target="_blank">http://www.rabbitmq.com/troubleshooting-ssl.html</a><br>
<br>
Let us know how far you get, which of the steps fail and the diagnostic<br>
output.<br>
<br>
<br>
Thanks<br>
<span class="HOEnZb"><font color="#888888"><br>
<br>
Emile<br>
<br>
</font></span></blockquote></div><br></div>