Re: Broker Federation with an Active-Active Broker Cluster

2017-12-11 Thread Tim Bain
Andreas, I don't have enough experience with Artemis to be able to answer your question, so I've been hoping that one of the Artemis folks on this list will jump in to answer. Since that's not happening, you may want to start a fresh message thread asking your question specifically in the context

Re: Amazon MQ

2017-12-11 Thread Jean-Baptiste Onofré
Hi Trevor, welcome aboard !! Regards JB On 12/11/2017 11:24 PM, trevdyck wrote: Hi everyone, I am the product manager for Amazon MQ, and have just joined the list. We are excited to support ActiveMQ as it has a vibrant developer community and a large existing user base! The folks on this list

Re: Configure broker with signed SSL certs

2017-12-11 Thread Tim Bain
Have you seen http://activemq.apache.org/how-do-i-use-ssl.html? Or http://www.giuseppeurso.eu/en/activemq-and-the-ssl-transport/? Tim On Dec 11, 2017 4:49 PM, "jason_pacino" wrote: > Are there step by step instruction for configuring a broker for use with a > signed SSL cert? > > > > -- > Sent

Re: Artemis CRL

2017-12-11 Thread Justin Bertram
If you look at Raul's commit you'll see support for OCSP in there. Really what's left is some testing and documentation to round it out (which was why I was asking about how to generate the CRL). In any case, thanks (as always) for your input. Justin On Mon, Dec 11, 2017 at 3:29 PM, Hadrian Zb

Re: Amazon MQ

2017-12-11 Thread trevdyck
Hi everyone, I am the product manager for Amazon MQ, and have just joined the list. We are excited to support ActiveMQ as it has a vibrant developer community and a large existing user base! The folks on this list have developed a great product that we are happy to be a part of. I will also say w

Configure broker with signed SSL certs

2017-12-11 Thread jason_pacino
Are there step by step instruction for configuring a broker for use with a signed SSL cert? -- Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-f2341805.html

Re: Artemis CRL

2017-12-11 Thread Hadrian Zbarcea
Keep in mind that CRLs are not used much because of a few reasons. One of the main ones is the heavy burden on ops/maintenance. You may want to take a look at ocsp. My $0.02, Hadrian On 12/11/2017 02:34 PM, Justin Bertram wrote: Can you describe how you created the activemq-revoke.crl that's

Re: Artemis CRL

2017-12-11 Thread Justin Bertram
Can you describe how you created the activemq-revoke.crl that's in your example? Justin On Mon, Dec 11, 2017 at 9:47 AM, Justin Bertram wrote: > The CRL logic applies to the *trust* manager. The way your example is > configured the CRL is specified on the broker side. In order to make use >

Re: Artemis CRL

2017-12-11 Thread Justin Bertram
The CRL logic applies to the *trust* manager. The way your example is configured the CRL is specified on the broker side. In order to make use of the CRL the client has to present a certificate for the broker to trust. However, the acceptor in your example (and test) is not configured to require

Re: Artemis CRL

2017-12-11 Thread Raul Valdoleiros
The server accepts the connection of the client with the revoked certificate, I think it should reject the connection. I add an example of that in the commit. 2017-12-11 14:05 GMT+00:00 Justin Bertram : > I took a quick look over the code and it looks good to me. What > specifically isn't workin

Re: Artemis CRL

2017-12-11 Thread Justin Bertram
I took a quick look over the code and it looks good to me. What specifically isn't working? Justin On Mon, Dec 11, 2017 at 3:06 AM, Raul Valdoleiros < raul.valdoleiros.olive...@gmail.com> wrote: > Hi Justin, > > What I did is available in the commit: > https://github.com/Skiler/activemq-artemi

Re: Artemis CRL

2017-12-11 Thread Raul Valdoleiros
Hi Justin, What I did is available in the commit: https://github.com/Skiler/activemq-artemis/commit/2e67595c3085eb62122906b22a3398f9de47 Definitely I did something wrong, perhaps some basic mistake. I Thanks in advance, Raul 2017-12-08 20:51 GMT+00:00 Justin Bertram : > FYI - I opened ARTEM

Re: Artemis JMS Client All JAR

2017-12-11 Thread beegee
Hi Mike, thank you for your detailed answer. Agree with all of your points. We will stick now with the single JAR as adding all dependencies manually is really troublesome in our software product (there are already dozens of libs included). Hopefully we will switch soon to Maven to resolve our dep