RabbitMQ 3.3.0 SSL

If you want the rabbitmq manager to work with ssl only put this in the rabbitmq.config

{rabbitmq_management,
  [{listener, [{port,     15672},
                  {ssl,      true},
                 {ssl_opts, [{cacertfile, "/home/me/testca/cacert.pem"},
                            {certfile,   "/home/me/testca/server/cert.pem"},
                              {keyfile,    "/home/me/testca/server/key.pem"},
                              {verify, verify_peer},
                              {fail_if_no_peer_cert, false }]}]}]},


Before doing so, you need to use the openssl to create the necessary certificates.
Beware to use the latest patch to the openssl that includes the bug fix for heartbeat bug.
Where ? you can read here, it's one possible example.

unable to find valid certification path to requested target

Hi,

The issue: You are probably missing the certificate for the specific site you work with.

Solution: You need to add export the certificate for the site mentioned above, After exporting it, add it to the cacerts file of java (default file) which located usually here : "c:\Program Files\Java\jdk1.6.0_23\jre\lib\security".
(the default java password for this file is 'changeit').

* If you need the export procedure, tell me, it's simple i can guide you.

In the code, add this lines :

System.setProperty("javax.net.ssl.trustStore", "path_to_cacerts_file/cacerts"); // for example c:\cert\cacerts
System.setProperty("javax.net.ssl.trustStorePassword", "changeit"); //unless you change it


You can also create your own certificate storage file and direct java to it instead.

Helpful link to keytool can be found here.

load certificates in java

Just add this line below to your context listener for example.


System.setProperty("javax.net.ssl.trustStore", "c:/certificates/certificates_storage_file");
System.setProperty("javax.net.ssl.trustStorePassword", "password");

Simple as that.

Dor

Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

Hi,
This exception might occur in:
1) Your key store file is corrupt and you should create it again.
(send a post if you need any help)
2) Your application failed loading the certificates key store (mentioned above).
Hoped i helped,
Dor