[rabbitmq-discuss] pika + ssl disconnects with ssl_upgrade_error

[Alexandru Scvorţov]

> Looking on http://www.erlang.org/doc/man/inet.html, the best I can
> guess is that "eacces" is some kind of permissions error.

Correct.  Make sure the user the server is running under (it's probably
rabbitmq) has read access to the certificate/key files.

> Is there
> documentation that can help me decode these error messages?

If you're referring to the Erlang SSL errors, no there isn't.

Cheers,
Alex

On Thu, Jan 05, 2012 at 01:22:20PM -0500, Roy Hyunjin Han wrote:
> 2012/1/5 Alexandru Scvorţov <alexandru at rabbitmq.com>:
> > eoptions means that particular option is incorrect.
> >
> >>            {ssl_options, [
> >>                {cacertfile, '/xxx/testca/cacert.pem'},
> >>                {certfile, '/xxx/server/cert.pem'},
> >>                {keyfile, '/xxx/server/key.pem'},
> >
> > Please use double quotes.  So, "/xxx/server/cert.pem", not
> > '/xxx/server/cert.pem'.  The same goes for the other options.
> 
> Thanks, Alexandru.  Your fix and explanation worked.  However, I am
> running into a new error.  It looks like this is an Erlang traceback.
> Looking on http://www.erlang.org/doc/man/inet.html, the best I can
> guess is that "eacces" is some kind of permissions error.  Is there
> documentation that can help me decode these error messages?
> 
> Thanks,
> RHH
> 
> 
> SSL: 1073: error:{error,{badmatch,{error,eacces}}} /xxx/testca/cacert.pem
>   [{ssl_connection,init_certificates,2},
>    {ssl_connection,ssl_init,2},
>    {ssl_connection,init,1},
>    {gen_fsm,init_it,6},
>    {proc_lib,init_p_do_apply,3}]
> 
> error on TCP connection <0.239.0>:{ssl_upgrade_error,ecacertfile}