Re: NMS SSL Client Settings

2014-02-09 Thread artnaseef
Correct - accepting invalid certs is not secure. Your client will connect to any broker using ssl regardless of cert validity in that case. Note I sm being a little vague because I am not certain of the NMS settings. You want the ssl url without the transport.acceptInvalidBrokerCert=true setti

Re: NMS SSL Client Settings

2014-02-09 Thread pwalter
Should this work? (removing the transport) with a valid certificate? From: ssl://localhost:61617?transport.acceptInvalidBrokerCert=true TO: ssl://localhost:61617 I'm concerned that the transport.acceptInvalidBrokerCert=true is not "secure" Thanks -- View this message in context: http://acti

Re: NMS SSL Client Settings

2014-02-09 Thread artnaseef
Are you looking for howto info? To make server cert checking work, the client must trust the server's cert. That means either get a server (broker) cert signed by a known trusted Certificate Authority (CA) or add the CA that did sign the cert to the client's trusted CA list. Sent from my iPho