1. C++ broker (M4 and up)
2. Java Client
3. .Net Client
Ex if running from source. ./qpidd --load-module /libs/ssl.so |
Ex ./qpidd ... --ssl-cert-password-file ~/pfile --ssl-cert-db ~/server_db/ --ssl-cert-name localhost.localdomain |
Here is an example of a broker instance that requires SSL client side authenticaiton
./qpidd ./qpidd --load-module /libs/ssl.so --ssl-cert-password-file ~/pfile --ssl-cert-db ~/server_db/ --ssl-cert-name localhost.localdomain --ssl-require-client-authentication |
-Djavax.net.ssl.keyStore=/home/bob/ssl_test/keystore.jks -Djavax.net.ssl.keyStorePassword=password -Djavax.net.ssl.trustStore=/home/bob/ssl_test/certstore.jks -Djavax.net.ssl.trustStorePassword=password |
Use the connectSSL instead of the standard connect method of the client interface.
connectSSL signature is as follows:
public void connectSSL(String host, int port, String virtualHost, String username, String password, String serverName, String certPath, bool rejectUntrusted) |
Where
Simply use amqps:// in the URL string as defined above