Hi, I guess the missing part is the mutual authentication (validation of the client certificate).
You need two things: 1. A truststore in the broker SSL context: <sslContext keyStore=… trustStore=…. /> 2. You need to enable the client need auth on the transport connector. For instance, for stomp: <transportConnector name="stomp" uri="stomp+nio+ssl://0.0.0.0:61613?transport.needClientAuth=true <stomp+nio+ssl://0.0.0.0:61613?transport.needClientAuth=true>"/> I will add this on website (it’s what you were looking for). Regards JB > Le 12 mars 2020 à 08:31, chx <[email protected]> a écrit : > > Hi, > > in the document there is one important instruction missing: > > https://activemq.apache.org/how-do-i-use-ssl > <https://activemq.apache.org/how-do-i-use-ssl> > > /*Instruct ActiveMQ to require client authentication by setting the > following in activemq.xml:*/ > > /- nothing -/ > > What is the instruction to add? > > Thanks, > > > > -- > Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-f2341805.html
