Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-3133

Broker's mutual TLS doesn't work

    XMLWordPrintable

Details

    • Story
    • Resolution: Duplicate
    • Major
    • None
    • AMQ 7.5.0.GA, AMQ 7.6.0.GA
    • container image
    • None

    Description

      Deploying the artemit to openshift using template does not enable authorization using mutual TLS. When broker's truststore is configured no CertificateLoginModule. was configured.
      Attaching yaml with openshift resources, and also login.config from the deployed pod.
      Expecting login.config to have TextFileCertificateLoginModule configured but it does not.
      Also when client tried to connect to the broker and authenticate using certificate, artemis pod has some exception in log, attaching also this.

      Attachments

        1. artemis.yml
          10 kB
        2. deploy_stdout
          0.1 kB
        3. login.config
          1 kB
        4. pod_log
          8 kB
        5. pod_log_after_connection
          34 kB

        Issue Links

          causes

          Bug - A problem that impairs or prevents the functions of the product. ENTSBT-202 SB Webflux AMQP - mutual TLS authentication fails

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. ENTMQBR-5144 Support for more login modules in security config

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              dbruscin Domenico Francesco Bruscino
              mocenas@redhat.com Martin Ocenas
              Mikhail Krutov Mikhail Krutov
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: