Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm attempting to configure RabbitMQ with SSL using client certificates for authentication on a windows server 2012 x64 box. The Erlang version installed is OTP 17.0 for Windows x64, Configuration is as such: {rabbit, [ {ssl_listeners, [5671]}, {auth_mechanisms, ['EXTERNAL']}, {auth_backends, [rabbit_auth_backend_ldap, rabbit_auth_backend_internal]},

{ssl_options, [{cacertfile,"D:\\RabbitMQ\\certs\\cacert.pem"},
              {certfile,"D:\\RabbitMQ\certs\\rabbit.pem"},
              {keyfile,"D:\\RabbitMQ\\certs\\rabbit.key"},
              {verify,verify_peer},
      {ssl_cert_login_from, common_name},
              {fail_if_no_peer_cert,true}]} 

]},

Whenever I connect, the client throws an error and the log file gets an entry like:

error on AMQP connection <0.310.0>: {ssl_upgrade_error,{options,{certfile,[68,58,92...

I've gone through the SSL Trouble shooting guide and confirmed that:

  • The certs are in the PEM format
  • The Broker is listening on the correct ports

The last bit of the trouble shooting guide indicates that "This is a generic error that could have many causes. Make sure you are using the recommended version of Erlang." Is there a version of Erlang I should be using other than OTP 17.0?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.