Thanks Domenico
Angelo
Il 07/02/2022 11:26, Domenico Francesco Bruscino ha scritto:
Hi Angelo,
Justin has already pointed you to the
standard/ssl-enabled-dual-authentication[1] example, that includes:
certificate mutual authentication at transport level and certificate
authentication/authorization at application level
using TextFileCertificateLoginModule[2].
If you just need certificate mutual authentication at transport level, the
standard/ssl-enabled-crl-mqtt example[3] shows you how to configure SSL
mutual authentication with CRL[4] for MQTT, you can remove the `crlPath`
parameter from the acceptor in the broker.xml file if you don't need CRL[4].
If certificate authentication/authorization is also required at application
level, you could add it to the standard/ssl-enabled-crl-mqtt example
following the dual authentication doc[5].
[1]
https://github.com/apache/activemq-artemis/tree/main/examples/features/standard/ssl-enabled-dual-authentication
[2]
https://activemq.apache.org/components/artemis/documentation/latest/security.html#certificateloginmodule
[3]
https://github.com/apache/activemq-artemis/tree/main/examples/features/standard/ssl-enabled-crl-mqtt
[4] https://en.wikipedia.org/wiki/Certificate_revocation_list
[5]
https://activemq.apache.org/components/artemis/documentation/latest/security.html#dual-authentication
Regards,
Domenico
On Mon, 7 Feb 2022 at 09:59, Angelo Ginocchio <[email protected]>
wrote:
Thanks Justin.
I was hoping there was a complete configuration specific to mqtts; I
have seen that there are many other configuration parameters, example:
acceptor, transportConnectors
Also, in the case of <transportConnectors ...> the uri is mqtt + ssl:
//x.x.x.x: 8883
or
mqtt: //x.x.x.x: 8883
I am a bit confused.
Thanks.
Angel
Il 07/02/2022 00:23, Justin Bertram ha scritto:
We ship an example in
examples/features/standard/ssl-enabled-dual-authentication [1] the
demonstrates the necessary configuration for cert-based authentication.
The
example uses JMS, but the configuration will be the same for every
supported protocol.
Justin
[1]
https://github.com/apache/activemq-artemis/tree/main/examples/features/standard/ssl-enabled-dual-authentication
On Sun, Feb 6, 2022 at 11:07 AM Angelo Ginocchio <
[email protected]>
wrote:
Hi everyone,
I use "Activemq artemis" and I have to configure the broker using the
MQTTS (secure-mqtt) connector with mutual authentication.
Do you have a configuration example that works that I can implement.
Thank you
Angelo
