Uploaded image for project: 'AMQ Interconnect'
  1. AMQ Interconnect
  2. ENTMQIC-1982

Qdmanage query doesn't show default ciphers of sslProfile

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Minor Minor
    • None
    • 1.1.0.GA
    • CLI Tools, Qpid Dispatch Router
    • None
    • Hide

      Setup ssl on Qpid-disaptch node (generate certificates).

      Setup ssl profile without ciphers option in config for example:

      router {
    id: router4
    mode: interior
    allowUnsettledMulticast: True
}

listener {
    sslProfile: Test
    host: 0.0.0.0
    port: 5672
    role: normal
    sasl-mechanisms: ANONYMOUS
    authenticatePeer: no
}

sslProfile {
    name: Test
    certFile: /root/ca/intermediate/certs/router.cert.pem
    keyFile: /root/ca/intermediate/private/router.key.pem
    password: messaging
}

      Run qdmanage on qpid-dispatch node:

      # qdmanage query ciphers
[]
      Show
      Setup ssl on Qpid-disaptch node (generate certificates). Setup ssl profile without ciphers option in config for example: router { id: router4 mode: interior allowUnsettledMulticast: True } listener { sslProfile: Test host: 0.0.0.0 port: 5672 role: normal sasl-mechanisms: ANONYMOUS authenticatePeer: no } sslProfile { name: Test certFile: /root/ca/intermediate/certs/router.cert.pem keyFile: /root/ca/intermediate/ private /router.key.pem password: messaging } Run qdmanage on qpid-dispatch node: # qdmanage query ciphers []

      Qdmanage doesn't chow default ciphers of sslProfile component in dispatch config file when ciphers aren't specified.

      Example:

      sslProfile {
    name: Test
    certFile: /root/ca/intermediate/certs/router.cert.pem
    keyFile: /root/ca/intermediate/private/router.key.pem
    password: messaging
}

            tross1@redhat.com Ted Ross
            jstejska@redhat.com Jakub Stejskal
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: