Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

update status-- I did following things on ubuntu12.04: 1). rebuilt the qpid-cpp 1.39 and qpid-proton C++ source and install 2). upgraded the libnspr4* from 4.8 to 4.12 3). upgraded the libnss3* from 3.13 to 3.26.2 Now, I'm able to make connection to remote JAVA server. The system seems not

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

Hi Gordon, I just worked with server group to put the username and password, it works now. I'm able to make connection to the remote JAVA server. So the error is related to the username and password, thank you for pointing out. Since it works with Ubuntu18.04, means the certs are good. I need

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

Hi Gordon, I checked with server group. There is no username/password required for port5673. Can you tell me which plug-in required for SCRAM-SHA-256 PLAIN? I installed some packages from this link(https://packages.ubuntu.com/source/bionic/cyrus-sasl2). Could not figure out which one is for SC

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

Hi Gordon, Thanks for your suggestion. By setting ssl_ignore_hostname_verification_failure=true, I'm able to see some data from JAVA server, now the error becomes "Can't authenticate using SCRAM-SHA-256 PLAIN" as below trace. Do I miss something? I tried "PLAIN" or "EXTERNAL", did not work eit

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

Hi Robbie, Thanks for pointing out. I did use the wrong port (5671 is for localhost test, 5673 is for remote JAVA server). I change the port to 5673, now I'm getting below error. I got both CA and server certs from server group and imported into NSS DB. Do I need to configure something on my si

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

Hi Robbie, I finally get Virtual ubuntu18.04 running with VPN. I run the qpid client on this OS, I got the different error message as below: (it said connection refused instead of TLS1.2 algorithm issue) 2020-09-09 17:44:37 [Messaging] debug Trying versions amqp0-10, amqp1.0 2020-09-09 17:44:3

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

On device localhost, I was using "qpidd --transport ssl --ssl-port 5673 --ssl-cert-db database --ssl-cert-password-file." as broker. Then run my qpid c++ ssl client. It worked. The device has limited memory, could not install java. The remote is qpid java server. By the way, I tried to run

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

Thanks for the reply. On localhost, I'm able to make a connection through my qpid c++ client. As long as I try to connect to remote server, it failed. The full qpid trace is as below. 2020-08-26 11:28:52 [Messaging] debug Trying versions amqp0-10, amqp1.0 2020-08-26 11:28:52 [Client] debug Startin

Re: Problem with establishing TLS1.1/TLS1.2 connection between cpp client and java broker with disabled TLS1.0 on broker side

Hi, I ran into the same issue now. When I run qpid C++ client to connect remote Java sever, I got below error: 2020-08-20 18:25:33 [System] debug Exception constructed: Failed: Cannot communicate securely with peer: no common encryption algorithm(s). [-12286] (/development/fxgtla/qpid/qpid-cpp-

Re: qpid c++ SSL client connecting to qpid Java server

Hi Robbie, Thanks for the links. I have been following the run_ssl_tests example and am able to create c++ client to connect to localhost qpid server with below certs created from certutil database. Certificate NicknameTrust Attributes SSL,S/MIME,JAR/XPI Test-

qpid c++ SSL client connecting to qpid Java server

Hi, I have problem to make qpid c++ client to connect to the remote qpid Java TLS server. I got a keystore file (truststore.jks) from server group. How to generate the CA cert with perm file and server cert with perm file from this jks file, and how to tag these files to c++ client certutil da