Hello,
When I run gmpub from GMSEC_API/bin directory with the following arguments:
./gmpub mw-id=activemq395 server=ssl://xxxxxxxx:61617 username=xxxxxxx
password=xxxxxxx SEC-SSL-TRUSTORE= SEC-SSL-TRUSTSTORE-KEY=xxxxxx
I get the following error messages from gmpub.cpp and the external ActiveMQ
broker below:
Gmpub.cpp:
2023-040-15:54:58.298 [INFO] [gmpub.cpp:104] GMSEC API v4.9.1 [09/27/2022]
2023-040-15:54:58.601 [ERROR] [CMSConnection.cpp:540] [2,500,0] : Error
occurred while accessing an OpenSSL library method:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate
verify failed
2023-040-15:54:58.601 [ERROR] [gmpub.cpp:208] [4,36,3]: Error connecting to
middleware broker [Channel was inactive for too long: ]
Error occurred while accessing an OpenSSL library method:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify
failed
FILE: activemq/core/ActiveMQConnection.cpp, LINE: 910
2023-040-15:54:58.601 [INFO] [CMSConnection.cpp:793] [0,39,0] : Connection
disconnected
ActiveMQ Broker:
"javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown_ca" at Feb
6 12:04
I imported the ActiverMQ broker's CA certificates into the client truststore.
My configuration is GMSEC v4.9.1, and ActiveMQ_CPP v3.9.5.
Gmpub.cpp works with SSL when configured with our local copy of a stock
ActiveMQ as per the GMSEC API Manual section 6.5.1.
What am I doing wrong? Has anyone encountered this before?