[rabbitmq-discuss] Issues with RabbitMQ, SSL and .NET

Fri Mar 14 14:18:56 GMT 2014

On 14 Mar 2014, at 17:08, Yoda Meng <yodameng at gmail.com> wrote:

> openssl s_server -accept 5671 -cert SSLserver/cert.pem -key SSLserver/key.pem \
> >   -CAfile SSLCA/cacert.pem
> Using default temp DH parameters
> Using default temp ECDH parameters
> ACCEPT
> -----BEGIN SSL SESSION PARAMETERS-----
> MHUCAQECAgMABAIABQQg2uALybqAbk6tXfkSN/Pypg4kqeosku2CdlyFiQj9gGcE
> MI0tXD4TyV/YWyqUB8gTnOc/Scx3hLJYG1dxGbDalzDg/Vz9BOSGBqfkvCYAERLq
> CKEGAgRTIvxuogQCAgEspAYEBAEAAAA=
> -----END SSL SESSION PARAMETERS-----
> Shared ciphers:RC4-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5
> CIPHER is RC4-SHA
> Secure Renegotiation IS supported
> AMQP    ERROR
> shutting down SSL
> CONNECTION CLOSED
> ACCEPT
> 
> and the .NET errors displays:
> 
> 
> None of the specified endpoints were reachable
> Endpoints attempted:
> ------------------------------------------------
> endpoint=amqp-0-9://MM181938-PC:5671, attempts=1
> RabbitMQ.Client.Exceptions.ProtocolVersionMismatchException: AMQP server protoc
> l negotiation failure: server version unknown-unknown, client version 0-9
>    at RabbitMQ.Client.Impl.ConnectionBase.StartAndTune()
>    at RabbitMQ.Client.Framing.Impl.v0_9_1.Connection.Open(Boolean insist)

.NET client complains that the server does not perform AMQP 0.9.1 protocol
negotiation, which is expected if you connect to openssl s_server.

I don’t see any TLS errors in this output.

MK

Software Engineer, Pivotal/RabbitMQ