[rabbitmq-discuss] SSL

SAG - Jonathan Andrés jandres at omie.es
Tue Apr 9 07:29:50 BST 2013


Yes, it's the same error.

In my java app I get an IOException:

.....
Padded plaintext before ENCRYPTION:  len = 32
0000: 01 6E FC 2A E2 FD AB 48   89 39 4D E2 57 AF FE 38  .n.*...H.9M.W..8
0010: 1F FE 8E 69 D2 0A 0A 0A   0A 0A 0A 0A 0A 0A 0A 0A  ...i............
main, WRITE: TLSv1 Application Data, length = 32
[Raw write]: length = 37
0000: 17 03 01 00 20 6B CB C7   4A 3B 0C C6 AB 4D 91 32  .... k..J;...M.2
0010: 1C C5 00 E8 4C 6A F5 81   2D 73 CE C4 2C E9 5B 79  ....Lj..-s..,.[y
0020: F9 C4 08 56 BF                                     ...V.
Padded plaintext before ENCRYPTION:  len = 48
0000: 00 01 00 00 00 05 00 14   00 0A 00 CE 71 CE EA 2A  ............q..*
0010: 79 05 5B 90 21 21 23 22   E6 8C 62 86 28 C0 02 12  y.[.!!#"..b.(...
0020: 0F 0F 0F 0F 0F 0F 0F 0F   0F 0F 0F 0F 0F 0F 0F 0F  ................
main, WRITE: TLSv1 Application Data, length = 48
[Raw write]: length = 53
0000: 17 03 01 00 30 A8 FE 5E   E8 7C 65 7A FE EE EC D7  ....0..^..ez....
0010: 75 79 6B 2D 19 58 47 12   F4 17 90 B4 46 06 27 84  uyk-.XG.....F.'.
0020: D8 36 69 BC B3 67 99 82   1E C2 0F 9F DE 1D DA 39  .6i..g.........9
0030: E1 2F 7C EF 71                                     ./..q
[Raw read]: length = 5
0000: 15 03 01 00 20                                     .... 
[Raw read]: length = 32
0000: 4C A8 61 69 CA BB 8A 0C   9A DF 51 13 46 5E 0F BF  L.ai......Q.F^..
0010: 28 A4 CC 3D 62 53 86 1E   5C A6 79 EA 42 06 25 C2  (..=bS..\.y.B.%.
AMQP Connection 127.0.0.1:5671, READ: TLSv1 Alert, length = 32
Padded plaintext after DECRYPTION:  len = 32
0000: 01 00 DA DA 68 F2 FA 9F   4F 2D 5C 51 12 9C 88 57  ....h...O-\Q...W
0010: C1 06 B0 FC 7C 3C 09 09   09 09 09 09 09 09 09 09  .....<..........
AMQP Connection 127.0.0.1:5671, RECV TLSv1 ALERT:  warning, close_notify
AMQP Connection 127.0.0.1:5671, called closeInternal(false)
AMQP Connection 127.0.0.1:5671, SEND TLSv1 ALERT:  warning, description = close_notify
Padded plaintext before ENCRYPTION:  len = 32
0000: 01 00 A5 22 B9 FF C9 25   0D AC B1 04 7A 90 78 BC  ..."...%....z.x.
0010: F7 98 84 A8 96 0F 09 09   09 09 09 09 09 09 09 09  ................
AMQP Connection 127.0.0.1:5671, WRITE: TLSv1 Alert, length = 32
[Raw write]: length = 37
0000: 15 03 01 00 20 D7 DB 40   94 77 51 4E 4C 97 BE CE  .... .. at .wQNL...
0010: E9 DC 1A BE 94 38 17 E9   0D F6 1B 4D 4D 85 A2 39  .....8.....MM..9
0020: D5 C7 60 2D 63                                     ..`-c
AMQP Connection 127.0.0.1:5671, called closeSocket(selfInitiated)
java.io.IOException
main, called close()
main, called closeInternal(true)
AMQP Connection 127.0.0.1:5671, called close()
AMQP Connection 127.0.0.1:5671, called closeInternal(true)


And this is the rabbitmq Log:

=INFO REPORT==== 9-Apr-2013::08:19:50 ===
started TCP Listener on 0.0.0.0:5672

=INFO REPORT==== 9-Apr-2013::08:19:50 ===
started SSL Listener on [::]:5671

=INFO REPORT==== 9-Apr-2013::08:19:50 ===
started SSL Listener on 0.0.0.0:5671

=INFO REPORT==== 9-Apr-2013::08:19:50 ===
Management agent started.

=INFO REPORT==== 9-Apr-2013::08:19:51 ===
Management plugin started. Port: 15672

=INFO REPORT==== 9-Apr-2013::08:19:51 ===
Statistics database started.

=INFO REPORT==== 9-Apr-2013::08:25:20 ===
accepting AMQP connection <0.331.0> (127.0.0.1:51980 -> 127.0.0.1:5671)

=ERROR REPORT==== 9-Apr-2013::08:25:23 ===
closing AMQP connection <0.331.0> (127.0.0.1:51980 -> 127.0.0.1:5671):
{handshake_error,opening,0,
                 {error,badarg,'connection.open',
                        [{io_lib,format,
                                 ["\\~2.16.0B",
                                  [[60,60,
                                    ["19",44,"9",44,"68",44,"83",44,"73",44,
                                     "83",44,"79",44,"70",44,"84",44,"57",44,
                                     "57"],
                                    62,62]]],
                                 [{file,"io_lib.erl"},{line,152}]},
                         {rabbit_misc,format,2,[]},
                         {rabbit_ssl,escape_rdn_value,2,[]},
                         {rabbit_ssl,format_rdn,1,[]},
                         {rabbit_ssl,'-format_complex_rdn/1-lc$^0/1-0-',1,[]},
                         {rabbit_ssl,format_complex_rdn,1,[]},
                         {rabbit_ssl,'-format_rdn_sequence/1-lc$^0/1-0-',1,[]},
                         {rabbit_ssl,'-format_rdn_sequence/1-lc$^0/1-0-',1,
                                     []}]}}



Thank you again! I do not know what else to do.







-----Mensaje original-----
De: Emile Joubert [mailto:emile at rabbitmq.com] 
Enviado el: lunes, 08 de abril de 2013 18:15
Para: SAG - Jonathan Andrés
CC: Discussions about RabbitMQ
Asunto: Re: [rabbitmq-discuss] SSL


Hi,

On 08/04/13 11:55, SAG - Jonathan Andrés wrote:
> On 08/04/13 09:06, SAG - Jonathan Andrés wrote:
>> The certificates are generated with Red Hat Certificate System 7.3
> 
> If you generate another certificate in the same way which exhibits the 
> same problem


Can you please confirm that you get exactly the same error as before with this certificate?


-Emile






More information about the rabbitmq-discuss mailing list