Hi Emile,<br><br>I ran through the troubleshooting wizard and the openssl connection test passes - so that makes me think it is not a network issue. However my java client still fails with the "Remote host closed connection during handshake" error. I have included the results of the connection test below. Any other thoughts on how I can debug this?<br>
<br>C:\temp>openssl s_client -connect <a href="http://199.71.180.59:5671">199.71.180.59:5671</a> -CAfile ssltest.pem<br>CONNECTED(00000003)<br>depth=1 /CN=ScaleGridCA<br>verify return:1<br>depth=0 /CN=i-19-483-VM/O=server<br>
verify return:1<br>---<br>Certificate chain<br> 0 s:/CN=i-19-483-VM/O=server<br> i:/CN=ScaleGridCA<br> 1 s:/CN=ScaleGridCA<br> i:/CN=ScaleGridCA<br>---<br>Server certificate<br>-----BEGIN CERTIFICATE-----<br>MIIC5zCCAc+gAwIBAgIBNDANBgkqhkiG9w0BAQUFADAWMRQwEgYDVQQDEwtTY2Fs<br>
ZUdyaWRDQTAeFw0xMjEwMjIxNjIxNTJaFw0xMzEwMjIxNjIxNTJaMCcxFDASBgNV<br>BAMTC2ktMTktNDgzLVZNMQ8wDQYDVQQKEwZzZXJ2ZXIwggEiMA0GCSqGSIb3DQEB<br>AQUAA4IBDwAwggEKAoIBAQDX7e0Jql/WTD7OUDTIQmg+igwhiVO+17QBuDkgSsQ/<br>9nRJSCZzEKC9guH7V+Veq8UG9G2brqwF10jzuZSOq3CGaBWH+F5KE/U+q2yuR3kt<br>
sOLz6wgMgYnobI1SWjvlkbwYKhgnv689m58Ub5lTISB3aKwT4C0ilnWBbF0v61mq<br>TFtjwDRAbCPXl9HwbBFoeLpTsiRu76VXWkA6pv9Ndl4hhcg2YLGwWAOdZO2/NUCB<br>QjqrHOir9ekjmpjWMQmWakN61/ckFuuFtGLOqrcujbRuVpAFFWGd53/quCZ+WKNw<br>81ZdafFnUSI8ioK2sHGQFxsQKNkpaRuE2/YbrLam+4HPAgMBAAGjLzAtMAkGA1Ud<br>
EwQCMAAwCwYDVR0PBAQDAgUgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3<br>DQEBBQUAA4IBAQBqBdvs5eHfVbh8jtp3KF/Q/UG/RtMBrkBnlFWLdBKbhYbWCC1K<br>5VncFIpQQ2K44G+RWaqMpPgwj4AZso83/JXn11b52ZxGdR8iogrAX4vWw41CNKfr<br>VX0jj4/TPlwFvdS9Jzd3w/NAvLgQ1JXZdBaWxAagfXl8++5nVdC94sj4GNkrCwyN<br>
r4zBiA6BOsmznVLBLjpoj3WLlrJDGZCTv+PSHDplZtuquDyl37PLOG6F2WUFAxaL<br>vhj7zKVTGIj7ESXuNYKnTSyLEkxvrlWdKooJKmH+v5xxEM6H2PqFcS/LGwIaUuxc<br>26AKWBnVcK+Pd86765KirNUwf7Fm2ChKwj9M<br>-----END CERTIFICATE-----<br>subject=/CN=i-19-483-VM/O=server<br>
issuer=/CN=ScaleGridCA<br>---<br>No client certificate CA names sent<br>---<br>SSL handshake has read 1632 bytes and written 444 bytes<br>---<br>New, TLSv1/SSLv3, Cipher is AES256-SHA<br>Server public key is 2048 bit<br>Compression: NONE<br>
Expansion: NONE<br>SSL-Session:<br> Protocol : TLSv1<br> Cipher : AES256-SHA<br> Session-ID: A0F1A911ED174A49B8AACDD54C3F21C1FD332949D892EEDABF84479DC21BB22D<br> Session-ID-ctx:<br> Master-Key: 8FCF38B3652F0A2E6BA8EEBACF2F7387C84416DDCC365A4FF8A4A4FA4B06343DEE463499007DDD03E1155A4A4D8317EE<br>
Key-Arg : None<br> Start Time: 1350938613<br> Timeout : 300 (sec)<br> Verify return code: 0 (ok)<br>---<br>12345678<br>AMQP ☺closed<br><br><div class="gmail_quote">On Mon, Oct 22, 2012 at 2:24 AM, Emile Joubert <span dir="ltr"><<a href="mailto:emile@rabbitmq.com" target="_blank">emile@rabbitmq.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
On 21/10/12 21:23, dharshanr wrote:<br>
> =ERROR REPORT==== 21-Oct-2012::09:12:49 ===<br>
> error on AMQP connection <0.7614.0>: {ssl_upgrade_error,timeout}<br>
<br>
Are you sure the problem is not network-related?<br>
<br>
> The certs are self signed certs and not trusted. Any thoughts on how I<br>
> can debug this error?<br>
<br>
It is strange that a working setup stops working suddenly. The tips in<br>
the SSL troubleshooting guide might provide more debugging information:<br>
<br>
<a href="http://www.rabbitmq.com/troubleshooting-ssl.html" target="_blank">http://www.rabbitmq.com/troubleshooting-ssl.html</a><br>
<span class="HOEnZb"><font color="#888888"><br>
<br>
-Emile<br>
<br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br>regards,<br>Dharshan.<br><div><a href="http://www.scalegrid.net" target="_blank">www.scalegrid.net</a></div><br>