I need clarification on the documentation provided in the link below

http://activemq.apache.org/how-do-i-use-ssl.html
<http://activemq.apache.org/how-do-i-use-ssl.html>  

This document states that:

/Using Spring to configure SSL for a Broker instance

Sometimes the use of javax.net.ssl.* system properties is not appropriate as
they effect all SSL users in a JVM. ActiveMQ 5.2.x adds an <sslContext>
element to the <amq:broker> that allows a broker specific set of SSL
properties to be configured.

The SslContext test case validates starting an SSL transport listener using
the configuration specified in the broker Xbean. The SslContext element is
added to the broker as follows:
<beans
  <amq:broker useJmx="false" persistent="false">
 
    <amq:sslContext>
      <amq:sslContext
            keyStore="server.keystore" keyStorePassword="password"
            trustStore="client.keystore" trustStorePassword="password"/>
    </amq:sslContext>
 
    <amq:transportConnectors>
      <amq:transportConnector uri="ssl://localhost:61616" />
    </amq:transportConnectors>
 
  </amq:broker>
</beans>

The SslContext is used to configure the SslTransportFactory for that broker.
Full details of the configuration options available can be seen in the
schema definition or in the accessors of
org.apache.activemq.spring.SpringSslContext/

I do not have any problems with all users of the JVM beging forced to use
SSL.  That would be good.

Therefore, It does not appear that I need to include the spring config in my
conf/activemq.xml file.

So my questions are:

1> Is it acceptable that I do not include the Spring config defined above in
my activemq.xml file

2> I do not think I need the ssl transport connector.  This does not appear
to be an issue, Is that correct

3>  I should not have to change my source code using all default values, or
change any values within the code.  Is this correct ?





--
View this message in context: 
http://activemq.2283324.n4.nabble.com/SSL-and-Spring-and-transport-connector-tp4681281.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Reply via email to