<div dir="ltr"><div class="gmail_quote"><div dir="ltr"><div><span style="font-family:arial,sans-serif;font-size:13px">Hi Michael, </span></div><div><span style="font-family:arial,sans-serif;font-size:13px"><b> </b> Thanks for your reply, Please help me out to fix this issue.</span></div>
<div class="">
<div><span style="font-family:arial,sans-serif;font-size:13px"><b><br></b></span></div><div><span style="font-family:arial,sans-serif;font-size:13px"><b>What client do you use?</b></span><span style="font-family:arial,sans-serif;font-size:13px"><b><br>
</b></span></div></div><div><font face="arial, sans-serif" color="#0000ff">I needs to use the cpp client, but the ssl connection is not happening even with openssl util (in s_client mode)</font></div><div class=""><div><span style="font-family:arial,sans-serif;font-size:13px"><b>Do you configure SSL to any specific version?</b></span><span style="font-family:arial,sans-serif;font-size:13px"><b><br>
</b></span></div></div><div><span style="font-family:arial,sans-serif;font-size:13px"><font color="#0000ff">No, Not aware of this how can i check that can you give me command to check</font></span></div><div><span style="font-family:arial,sans-serif;font-size:13px"><font color="#0000ff"><br>
</font></span></div><div><div><font face="arial, sans-serif" color="#660000"><i># erl</i></font></div><div><font face="arial, sans-serif" color="#660000"><i>Erlang R16B (erts-5.10.1) [source] [smp:8:8] [async-threads:10] [hipe] [kernel-poll:false]</i></font></div>
<div><font face="arial, sans-serif" color="#660000"><i><br></i></font></div><div><font face="arial, sans-serif" color="#660000"><i>Eshell V5.10.1 (abort with ^G)</i></font></div><div><font face="arial, sans-serif" color="#660000"><i>1> ssl:versions().</i></font></div>
<div><font face="arial, sans-serif" color="#660000"><i>[{ssl_app,"5.2.1"},</i></font></div><div class=""><div><font face="arial, sans-serif" color="#660000"><i> {supported,['tlsv1.2','tlsv1.1',tlsv1,sslv3]},</i></font></div>
<div><font face="arial, sans-serif" color="#660000"><i> {available,['tlsv1.2','tlsv1.1',tlsv1,sslv3]}]</i></font></div></div><div><font face="arial, sans-serif" color="#660000"><i>2></i></font></div><div>
<font face="arial, sans-serif" color="#660000"><i>2></i></font></div>
<div style="color:rgb(0,0,255);font-family:arial,sans-serif;font-size:13px"><br></div></div><div class=""><div><span style="font-family:arial,sans-serif;font-size:13px"><font color="#0000ff"><br></font></span></div><div>
<span style="font-family:arial,sans-serif;font-size:13px"><b>What OS does your client and RabbitMQ run on?</b></span><br>
</div></div><div><font color="#0000ff"># cat /etc/redhat-release</font></div><div><font color="#0000ff">Red Hat Enterprise Linux Server release 6.2 (Santiago)</font></div><div><br></div><div>My Rabbitmq.config file </div>
<div><br>
</div><div><div><i><font color="#4c1130"># cat /etc/rabbitmq/rabbitmq.config</font></i></div><div><i><font color="#4c1130">[</font></i></div><div><i><font color="#4c1130"> {rabbit, [</font></i></div><div><i><font color="#4c1130"> {ssl_listeners, [5671]},</font></i></div>
<div><i><font color="#4c1130"> {ssl_options, [{cacertfile,"/home/prime/SSL/testca/cacert.pem"},</font></i></div><div><i><font color="#4c1130"> {certfile,"/home/prime/SSL/server/cert.pem"},</font></i></div>
<div><i><font color="#4c1130"> {keyfile,"/home/prime/SSL/server/key.pem"},</font></i></div><div><i><font color="#4c1130"> {verify,verify_peer},</font></i></div><div><i><font color="#4c1130"> {fail_if_no_peer_cert,true}]},</font></i></div>
<div><i><font color="#4c1130"><br></font></i></div><div><i><font color="#4c1130"> {loopback_users, []}</font></i></div><div><i><font color="#4c1130"> ]}</font></i></div><div><i><font color="#4c1130">].</font></i></div>
</div><div><br></div><div>Openssl client output: </div><div><br></div><div><div><font color="#4c1130"><i>$ openssl s_client -connect localhost:5671 -cert client/cert.pem -key client/key.pem -CAfile testca/cacert.pem</i></font></div>
<div><font color="#4c1130"><i>CONNECTED(00000003)</i></font></div><div><font color="#4c1130"><i>write:errno=104</i></font></div><div><font color="#4c1130"><i>---</i></font></div><div><font color="#4c1130"><i>no peer certificate available</i></font></div>
<div><font color="#4c1130"><i>---</i></font></div><div><font color="#4c1130"><i>No client certificate CA names sent</i></font></div><div><font color="#4c1130"><i>---</i></font></div><div><font color="#4c1130"><i>SSL handshake has read 0 bytes and written 113 bytes</i></font></div>
<div><font color="#4c1130"><i>---</i></font></div><div><font color="#4c1130"><i>New, (NONE), Cipher is (NONE)</i></font></div><div><font color="#4c1130"><i>Secure Renegotiation IS NOT supported</i></font></div><div><font color="#4c1130"><i>Compression: NONE</i></font></div>
<div><font color="#4c1130"><i>Expansion: NONE</i></font></div><div><font color="#4c1130"><i>---</i></font></div></div><div><br></div><div><br></div><div>rabbitmq broker.log</div><div><font color="#4c1130"><i><br></i></font></div>
<div><div><font color="#4c1130"><i>=INFO REPORT==== 4-Jun-2014::17:27:17 ===</i></font></div><div><font color="#4c1130"><i>accepting AMQP connection <0.951.0> (<a href="http://127.0.0.1:38486" target="_blank">127.0.0.1:38486</a> -> <a href="http://127.0.0.1:5671" target="_blank">127.0.0.1:5671</a>)</i></font></div>
<div><font color="#4c1130"><i><br></i></font></div><div><font color="#4c1130"><i>=ERROR REPORT==== 4-Jun-2014::17:27:22 ===</i></font></div><div><font color="#4c1130"><i>error on AMQP connection <0.951.0>: {ssl_upgrade_error,{options,{cacertfile,[47,104,111,109,101,47,112,114,105,109,101,47,83,83,76,47...</i></font></div>
<div><br></div></div><div class="gmail_extra"><br>--</div><div class="gmail_extra">Thanks & Regards</div><div class="gmail_extra"><span class="HOEnZb"><font color="#888888">Narayan</font></span><div><div class="h5"><br>
<br><div class="gmail_quote">On 4 June 2014 13:37, Michael Klishin <span dir="ltr"><<a href="mailto:mklishin@gopivotal.com" target="_blank">mklishin@gopivotal.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> On 4 June 2014 at 12:00:48, Narayan (<a href="mailto:bvnr.mail@gmail.com" target="_blank">bvnr.mail@gmail.com</a>) wrote:<br>
> > * Check SSL support in Erlang ----- SUCCESS<br>
> ssl:versions().<br>
> SSL version: [{ssl_app,"5.3"},<br>
> {supported,['tlsv1.2','tlsv1.1',tlsv1,sslv3]},<br>
> {available,['tlsv1.2','tlsv1.1',tlsv1,sslv3]}]<br>
> RabbitMQ 3.3.0, Erlang R16B01<br>
<br>
What client do you use? Do you configure SSL to any specific version?<br>
What OS does your client and RabbitMQ run on?<br>
--<br>
MK<br>
<br>
Software Engineer, Pivotal/RabbitMQ<br>
</blockquote></div><br></div></div></div></div>
</div><br></div>