[ https://issues.apache.org/jira/browse/QPID-6261?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14239831#comment-14239831 ]
Brent Driskill commented on QPID-6261: -------------------------------------- Thank you Gordon. I will test out your suggestions above and let you know. > Federation with SSL is failing between two brokers > -------------------------------------------------- > > Key: QPID-6261 > URL: https://issues.apache.org/jira/browse/QPID-6261 > Project: Qpid > Issue Type: Bug > Components: C++ Broker > Affects Versions: 0.30 > Environment: CentOS 7 > Reporter: Brent Driskill > Priority: Critical > Attachments: qpidd10000.conf, qpidd10002.conf > > > I am unable to get federation to work between two brokers that are SSL > enabled with different SASL configurations. > Reproduction Steps: > 1. Deploy two separate brokers on the same machine. One has port 10000 > (destination broker) and one has port 10002 (source broker). The > configuration for both these brokers are attached. The acl file for broker > 10000 has "acl allow all all" and the other has "acl allow all all" for a > specific user. > 2. Execute python scripts to create the queues and exchanges > 3. Execute the following qpid-route command to federate between the two: > {noformat} > qpid-route queue add amqps://<username>/<password>@<ip>:10000 > amqps://<username>/<password>@<ip>:10002 <destination_exchange> > <source_queue> -t ssl --ssl-certificate <path_to_pem> > {noformat} > The qpid-route throws the following error: > {noformat} > Failed: ConnectionFailed - (None, 'connection aborted') > {noformat} > I see the following error in the logs for broker 10000 around the same time > (not sure if it is related or not) > {noformat} > 2014-12-02 14:18:07 [System] error Connection > qpid.192.168.10.104:10000-192.168.10.104:33642 No protocol received closing > 2014-12-02 14:18:07 [System] debug DISCONNECTED > [qpid.192.168.10.104:10000-192.168.10.104:33642] > {noformat} > If I disable SSL, everything works perfectly (with the sasl configurations > the same). The c++ clients are able to connect to both brokers correctly > using the pem file. -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org