<font size=2 face="sans-serif">Applogies.</font>
<br>
<br><font size=2 face="sans-serif">Will do that for sure. Currently there
are some technical issues, and getting some messages of there are some
request processing issues .</font>
<br>
<br><font size=2 face="sans-serif">Would request you to please let me know
how one can instruct rabbitmq not verify peer and use the one connect without
validating certificates ?</font>
<br>
<br><font size=2 face="sans-serif">My config file:</font>
<br>
<br><font size=1 face="Courier New">[{rabbit, [{tcp_listeners,
[5672]},{ssl_listeners, [5671]}, </font>
<br><font size=1 face="Courier New">
{ssl_options,
[{cacertfile,"/etc/rabbitmq/testca/cacert.pem"},</font>
<br><font size=1 face="Courier New">
{certfile,"/etc/rabbitmq/server/cert.pem"},</font>
<br><font size=1 face="Courier New">
{keyfile,"/etc/rabbitmq/server/key.pem"},</font>
<br><font size=1 face="Courier New">
</font><font size=3 face="Courier New"><b>{verify,verify_none},</b></font>
<br><font size=1 face="Courier New">
{fail_if_no_peer_cert,false}]}]}</font>
<br><font size=1 face="Courier New">].</font>
<br>
<br><font size=2 face="sans-serif">I have already mentioned verify none.</font>
<br><font size=2 face="sans-serif">Restarted the server , but nothing happened.Still
getting some ssl upgrade error.</font>
<br><font size=2 face="sans-serif"><br>
Thanks and Regards,<br>
Ankur Chakraborty<br>
_</font>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">Michael Klishin <mklishin@pivotal.io></font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">Ankur5 C <ankur5.c@tcs.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc:
</font><font size=1 face="sans-serif">Legacy list about RabbitMQ
<rabbitmq-discuss@lists.rabbitmq.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">31-07-2014 11:12</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">Re: Create an
encrypted SSL connection without having to verify certificate</font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>On 31 July 2014 at 09:33:17, Ankur5 C (ankur5.c@tcs.com)
wrote:<br>
> > The example given in </font></tt><a href=https://www.rabbitmq.com/ssl.htmlfor><tt><font size=2>https://www.rabbitmq.com/ssl.htmlfor</font></tt></a><tt><font size=2>
<br>
> connecting a TLS port 5671 is not working.<br>
> <br>
> Exception:<br>
> accepting AMQP connection <0.231.0> (192.168.161.171:65208 <br>
> -> 192.168.161.197:5671)<br>
> =ERROR REPORT==== 30-Jul-2014::17:53:07 <br>
> error on AMQP connection <0.231.0>:<br>
> {ssl_upgrade_error,timeout}<br>
> <br>
> In one of the solution you said "somehow end up connecting with
<br>
> a non-TLS client on the TLS port. "<br>
<br>
It is not a solution, it is the problem. A client connects to RabbitMQ
on<br>
port 5671, RabbitMQ expects the client to perform a TLS upgrade (this is<br>
the default TLS connections port) but the client is not instructed to do
it,<br>
so it never does. After waiting for some time, RabbitMQ declares that<br>
TLS upgrade has timed out and drops the TCP connection.<br>
<br>
> So the example in </font></tt><a href=https://www.rabbitmq.com/ssl.htmlfor><tt><font size=2>https://www.rabbitmq.com/ssl.htmlfor</font></tt></a><tt><font size=2>
"Connecting <br>
> without validating certificates", what is that? Is it a non TLS
<br>
> client? How to make it TLS?<br>
<br>
It demonstrates how to make the Java client use TLS connections, yes.<br>
<br>
> I simply need to execute the java code right ? Or something more <br>
> I have to do?<br>
> <br>
> Please suggest how to resolve this.<br>
<br>
The "Connecting without validating certificates"<br>
example on </font></tt><a href=https://www.rabbitmq.com/ssl.html><tt><font size=2>https://www.rabbitmq.com/ssl.html</font></tt></a><tt><font size=2>
demonstrates the bare<br>
minimum you have to do but because you instructed RabbitMQ to perform<br>
peer verification, you need to use the second example,<br>
"Presenting and validating certificates".<br>
<br>
The guide at </font></tt><a href=https://www.rabbitmq.com/ssl.html><tt><font size=2>https://www.rabbitmq.com/ssl.html</font></tt></a><tt><font size=2>
goes into a lot of detail<br>
on every step you need to take to connect with TLS encryption from Java.<br>
<br>
You can generate a bunch of certificates (including PCSK12 certificates
used<br>
by JDK's keytool) using tls-gen:<br>
</font></tt><a href="https://github.com/michaelklishin/tls-gen/"><tt><font size=2>https://github.com/michaelklishin/tls-gen/</font></tt></a><tt><font size=2><br>
<br>
Unless a new thread is started (I've asked you to do so twice )<br>
and you post your actual code, I'll refrain from replying to this thread.<br>
-- <br>
MK <br>
<br>
Staff Software Engineer, Pivotal/RabbitMQ<br>
</font></tt>
<br><p>=====-----=====-----=====<br>
Notice: The information contained in this e-mail<br>
message and/or attachments to it may contain <br>
confidential or privileged information. If you are <br>
not the intended recipient, any dissemination, use, <br>
review, distribution, printing or copying of the <br>
information contained in this e-mail message <br>
and/or attachments to it are strictly prohibited. If <br>
you have received this communication in error, <br>
please notify us by reply e-mail or telephone and <br>
immediately and permanently delete the message <br>
and any attachments. Thank you</p>
<p></p>