Re: Additional Info on certificate based authentication errors

2025-04-17 Thread Domenico Francesco Bruscino
ssage(CreateMessageContext > messageContext, Boolean isForTopic, Int32 priority)." > > Best Regards > Shiv > > -----Original Message----- > From: Justin Bertram > Sent: 16 April 2025 09:56 PM > To: users@activemq.apache.org > Subject: Re: Additional Info on certific

RE: Additional Info on certificate based authentication errors

2025-04-17 Thread Shiv Kumar Dixit
ext, Boolean isForTopic, Int32 priority)." Best Regards Shiv -Original Message- From: Justin Bertram Sent: 16 April 2025 09:56 PM To: users@activemq.apache.org Subject: Re: Additional Info on certificate based authentication errors Unverified Sender: The sender of this email has not be

Re: Additional Info on certificate based authentication errors

2025-04-16 Thread Justin Bertram
ownload link as well? > > Best Regards > Shiv > > -----Original Message- > From: Domenico Francesco Bruscino > Sent: 16 April 2025 12:13 PM > To: users@activemq.apache.org > Subject: Re: Additional Info on certificate based authentication errors > > > >

RE: Additional Info on certificate based authentication errors

2025-04-16 Thread Shiv Kumar Dixit
netty-tcnative > > to your classpath to use the native installed openssl". So openssl > > installation is precondition to use OPENSSL as sslProvider? > > > > Best Regards > > Shiv > > > > -Original Message- > > From: Domenico Francesco B

Re: Additional Info on certificate based authentication errors

2025-04-15 Thread Domenico Francesco Bruscino
tty-tcnative > > to your classpath to use the native installed openssl". So openssl > > installation is precondition to use OPENSSL as sslProvider? > > > > Best Regards > > Shiv > > > > -Original Message- > > From: Domenico Francesco Br

RE: Additional Info on certificate based authentication errors

2025-04-15 Thread Shiv Kumar Dixit
---Original Message- > From: Domenico Francesco Bruscino > Sent: 14 April 2025 01:52 PM > To: users@activemq.apache.org > Subject: Re: Additional Info on certificate based authentication > errors > > > > Unverified Sender: The sender of this email has not been verified.

Re: Additional Info on certificate based authentication errors

2025-04-14 Thread Domenico Francesco Bruscino
t; -Original Message- > From: Domenico Francesco Bruscino > Sent: 14 April 2025 01:52 PM > To: users@activemq.apache.org > Subject: Re: Additional Info on certificate based authentication errors > > > > Unverified Sender: The sender of this email has not been verified. Re

RE: Additional Info on certificate based authentication errors

2025-04-14 Thread Shiv Kumar Dixit
M, we could have 2 listeners - one has correctly > > configured the certificate details while another has wrong > > configuration. Second one is causing " > > javax.net.ssl.SSLHandshakeException: Empty server certificate chain" > > error on the broker. Given we

Re: Additional Info on certificate based authentication errors

2025-04-14 Thread Domenico Francesco Bruscino
at > org.apache.activemq.artemis.boot.Artemis.execute(Artemis.java:152) > at org.apache.activemq.artemis.boot.Artemis.main(Artemis.java:64) > Caused by: java.lang.ClassNotFoundException: > io.netty.internal.tcnative.SSLPrivateKeyMethod > at java.base/java.net > .URLClassLoader.find

RE: Additional Info on certificate based authentication errors

2025-04-11 Thread Shiv Kumar Dixit
riginal Message- From: Justin Bertram Sent: 11 April 2025 01:55 AM To: users@activemq.apache.org Subject: Re: Additional Info on certificate based authentication errors Unverified Sender: The sender of this email has not been verified. Review the content of the message carefully and verify the

RE: Additional Info on certificate based authentication errors

2025-04-10 Thread Shiv Kumar Dixit
/1.2.3.4:62403 has occurred.' Where clients are trying to connect back. After some time it got restarted with OOM. Best Regards Shiv -Original Message- From: Justin Bertram Sent: 04 April 2025 09:26 PM To: users@activemq.apache.org Subject: Re: Additional Info on certificate based a

Re: Additional Info on certificate based authentication errors

2025-04-10 Thread Justin Bertram
ustin Bertram > Sent: 08 April 2025 11:38 PM > To: users@activemq.apache.org > Subject: Re: Additional Info on certificate based authentication errors > > > > Unverified Sender: The sender of this email has not been verified. Review > the content of the message carefully and

Re: Additional Info on certificate based authentication errors

2025-04-10 Thread Justin Bertram
or, will it protect against > misbehaving producer/consumer? I understood that it is only good enough to > restrict good connections. > > Best Regards > Shiv > > -----Original Message----- > From: Justin Bertram > Sent: 09 April 2025 07:28 PM > To: users@activemq.apac

RE: Additional Info on certificate based authentication errors

2025-04-10 Thread Shiv Kumar Dixit
t; Sent: 08 April 2025 11:38 PM > To: users@activemq.apache.org > Subject: Re: Additional Info on certificate based authentication > errors > > > > Unverified Sender: The sender of this email has not been verified. > Review the content of the message carefully and verify the

RE: Additional Info on certificate based authentication errors

2025-04-09 Thread Shiv Kumar Dixit
Artemis broker? Best Regards Shiv -Original Message- From: Justin Bertram Sent: 08 April 2025 11:38 PM To: users@activemq.apache.org Subject: Re: Additional Info on certificate based authentication errors Unverified Sender: The sender of this email has not been verified. Review the

Re: Additional Info on certificate based authentication errors

2025-04-08 Thread Justin Bertram
> Best Regards > Shiv > > -----Original Message----- > From: Justin Bertram > Sent: 04 April 2025 09:26 PM > To: users@activemq.apache.org > Subject: Re: Additional Info on certificate based authentication errors > > > > Unverified Sender: The sender of this ema

Re: Additional Info on certificate based authentication errors

2025-04-04 Thread Justin Bertram
lHandler sslhandler = (SslHandler) > > ctx.channel().pipeline().get("ssl"); > > > > sslhandler.engine().getSession().getPeerCertificateChain()[0].getSubje > > ctDN()); > > > > Best Regards > > Shiv > > > > -Original Message- >

RE: Additional Info on certificate based authentication errors

2025-04-03 Thread Shiv Kumar Dixit
- From: Justin Bertram Sent: 03 April 2025 08:05 PM To: users@activemq.apache.org Subject: Re: Additional Info on certificate based authentication errors Unverified Sender: The sender of this email has not been verified. Review the content of the message carefully and verify the identity of the

Re: Additional Info on certificate based authentication errors

2025-04-03 Thread Justin Bertram
.channel().pipeline().get("ssl"); > > sslhandler.engine().getSession().getPeerCertificateChain()[0].getSubjectDN()); > > Best Regards > Shiv > > -Original Message- > From: Justin Bertram > Sent: 28 March 2025 10:42 PM > To: users@activemq.apache.org >

RE: Additional Info on certificate based authentication errors

2025-04-03 Thread Shiv Kumar Dixit
To: users@activemq.apache.org Subject: Re: Additional Info on certificate based authentication errors Unverified Sender: The sender of this email has not been verified. Review the content of the message carefully and verify the identity of the sender before acting on this email: replying, opening atta

Re: Additional Info on certificate based authentication errors

2025-03-28 Thread Justin Bertram
I am also checking with netty community if they can > provide some input. > > Best Regards > Shiv > > -Original Message- > From: Justin Bertram > Sent: 28 March 2025 08:33 AM > To: users@activemq.apache.org > Subject: Re: Additional Info on certificate base

RE: Additional Info on certificate based authentication errors

2025-03-28 Thread Shiv Kumar Dixit
netty community if they can provide some input. Best Regards Shiv -Original Message- From: Justin Bertram Sent: 28 March 2025 08:33 AM To: users@activemq.apache.org Subject: Re: Additional Info on certificate based authentication errors Unverified Sender: The sender of this email has not

Re: Additional Info on certificate based authentication errors

2025-03-27 Thread Justin Bertram
Unfortunately I don't think the broker itself will be able to provide additional information because it simply doesn't have it. The SSL handshake is delegated by Netty to the JDK (or potentially to OpenSSL) and it's the first thing done when the client connects. It happens before the messaging prot