Encrypted passwords using other JCE provider?

2016-03-14 Thread leaski
Hi All, I see that you can use JASYPT to encrypt credentials that ActiveMQ uses, and this is documented here... http://activemq.apache.org/encrypted-passwords.html also see the JASYPT documentation... http://www.jasypt.org/spring31.html Is there anyway to use other providers to do this? For exa

Re: ActiveMQ SSL implementation

2016-01-25 Thread leaski
Managed to get around this issue, so now ActiveMQ starts ok when Java is enabled for FIPS mode using NSS. See ActiveMQ JIRA case... https://issues.apache.org/jira/browse/AMQ-5100 -- View this message in context: http://activemq.2283324.n4.nabble.com/ActiveMQ-SSL-implementation-tp4706285p47064

Re: ActiveMQ SSL implementation

2016-01-25 Thread leaski
So I had a go at trying to do this. I have followed the online guides on how to get NSS working with Java SE (running on windows), and have managed to get Java to work ok with NSS. I have configured the sslContext to point to the NSS DB, and set the store types as PKCS11. However when starting u

Re: ActiveMQ SSL implementation

2016-01-21 Thread leaski
Ah, ok, so if I was running ActiveMQ on Windows using Oracles "Sun Java SE", then it is basically using their SSL implementation. So, if I go about following their FIPS mode switch, then technically, that would switch ActiveMQs SSL transport into a FIPS ok mode? -- View this message in context:

ActiveMQ SSL implementation

2016-01-21 Thread leaski
Hi all, Can someone explain to me if ActiveMQ is using its own SSL implementation, or if it is using a "well known" library such as OpenSSL? Thanks -- View this message in context: http://activemq.2283324.n4.nabble.com/ActiveMQ-SSL-implementation-tp4706285.html Sent from the ActiveMQ - User m

Securing up ActiveMQ

2016-01-11 Thread leaski
Hi all, At the moment I am currently investigating how to secure up our implementation of Active MQ. I have done some reading and have managed to setup a test system running SSL and the Simple Authentication Plugin. This seems pretty simple, but I have a couple of questions about the level of se

ActiveMQ CPP a Safe C library?

2015-08-28 Thread leaski
Hi all, Not sure if this is the right place to ask or not, so sorry if it isn't. I am currently using the Active MQ CPP connector, so that I can produce and consume topics over an Active MQ bus. Recently I have asked to evaluate the security of our system and the components that it uses. One of