One question - where is the tcp:// address "seen"? As long as there are no "tcp:" nor "nio:" transports configured on the broker, there is no way for a client to connect without SSL. If they try, the server logs an error about improper SSL handshake and suggests a "plain-text" connection was attempted.
Check the webconsole or via JMX to confirm the only connector is the nio+ssl connector. On the client side, make sure all clients use ssl:// for the URL. -- View this message in context: http://activemq.2283324.n4.nabble.com/Securing-JMS-queque-tp4684509p4684967.html Sent from the ActiveMQ - User mailing list archive at Nabble.com.