On Tue, Feb 2, 2010 at 4:48 PM, Boris Belov <bbel...@gmail.com> wrote:
>
> Hello,
>
> We are attempting to configure embedded  ActiveMQ broker over https and
> failing to do so. Any attempt to start the broker results in
> jetty.ssl.password prompt.
> After entering the password the following exception is generated.
>
> 2010-02-02 15:47:10.931::INFO:  jetty-6.1.11
> 2010-02-02 15:47:10.938::INFO:  Started sslsocketconnec...@0.0.0.0:62010
> INFO  - TransportConnector         - Connector
> https://0.0.0.0:62010?trace=true Started
> 2010-02-02 15:47:10.939::WARN:  EXCEPTION
> javax.net.ssl.SSLException: No available certificate or key corresponds to
> the SSL cipher suites which are enabled.
>        at
> com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(SSLServerSocketImpl.java:307)
>        at
> com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept(SSLServerSocketImpl.java:253)
>        at
> org.mortbay.jetty.security.SslSocketConnector.accept(SslSocketConnector.java:172)
>        at
> org.mortbay.jetty.AbstractConnector$Acceptor.run(AbstractConnector.java:707)
>        at
> org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:488)
> jetty.ssl.password :

Have you imported the CA certs into the correct keystore? I've
experienced this problem myself in the past. Also make sure that the
private key is in the keystore, not just the public key.

Also, take a look at the instructions here:

http://activemq.apache.org/how-do-i-use-ssl.html

When I've had problems in the past with SSL, reading through these has helped.

Bruce
-- 
perl -e 'print 
unpack("u30","D0G)u8...@4vyy9&5R\"F)R=6-E+G-N>61E<D\!G;6%I;\"YC;VT*"
);'

ActiveMQ in Action: http://bit.ly/2je6cQ
Blog: http://bruceblog.org/
Twitter: http://twitter.com/brucesnyder

Reply via email to