Account Options

  1. Sign in
The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Google Groups Home
« Groups Home
SSL w/ intermediate certificate
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  5 messages - Collapse all  -  Translate all to Translated (View all originals)
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Followup To:
Add Cc | Add Followup-to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers you hear
 
Carl Hörberg  
View profile  
 More options Mar 11 2012, 2:05 pm
From: Carl Hörberg <carl.hoerb...@gmail.com>
Date: Sun, 11 Mar 2012 11:05:43 -0700 (PDT)
Local: Sun, Mar 11 2012 2:05 pm
Subject: [rabbitmq-discuss] SSL w/ intermediate certificate

Can I somehow include an intermediate certificate in the certfile?

when i try i get the following error in the rabbitmq log when i access the
management interface:

=ERROR REPORT==== 11-Mar-2012::14:44:02 ===
SSL: 1084: error:[...skipping...] /etc/rabbitmq/ssl.pem
  [{ssl_connection,init_certificates,5},
   {ssl_connection,ssl_init,2},
   {ssl_connection,init,1},
   {gen_fsm,init_it,6},
   {proc_lib,init_p_do_apply,3}]

=ERROR REPORT==== 11-Mar-2012::17:29:15 ===
    application: mochiweb
    "Accept failed error"
    "{error,ecertfile}"

_______________________________________________
rabbitmq-discuss mailing list
rabbitmq-disc...@lists.rabbitmq.com
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Emile Joubert  
View profile  
 More options Mar 12 2012, 6:29 am
From: Emile Joubert <em...@rabbitmq.com>
Date: Mon, 12 Mar 2012 10:29:01 +0000
Local: Mon, Mar 12 2012 6:29 am
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
Hi Carl,

On 11/03/12 18:05, Carl Hörberg wrote:

> =ERROR REPORT==== 11-Mar-2012::17:29:15 ===
>     application: mochiweb
>     "Accept failed error"
>     "{error,ecertfile}"

This error normally means there is something wrong with the certificate,
but it's not possible to provide a more precise diagnosis without more
details.

You can test it by using the certificate to create an SSL connection
with the OpenSSL s_server option.

How did you create the certificate? You should double-check the commands
used.

-Emile
_______________________________________________
rabbitmq-discuss mailing list
rabbitmq-disc...@lists.rabbitmq.com
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Carl Hörberg  
View profile  
 More options Mar 12 2012, 8:24 am
From: Carl Hörberg <carl.hoerb...@gmail.com>
Date: Mon, 12 Mar 2012 13:24:50 +0100
Local: Mon, Mar 12 2012 8:24 am
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
cat ssl.crt ssl.key intermediate.crt > ssl.pem

anyway.. it seems to work fine with just:

cat ssl.crt ssl.key > ssl.pem

_______________________________________________
rabbitmq-discuss mailing list
rabbitmq-disc...@lists.rabbitmq.com
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss

 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Carl Hörberg  
View profile  
 More options Mar 13 2012, 6:19 pm
From: Carl Hörberg <carl.hoerb...@gmail.com>
Date: Tue, 13 Mar 2012 23:19:15 +0100
Local: Tues, Mar 13 2012 6:19 pm
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
it works fine for most web browsers, but not with eg. openssl s_client etc.

but the fix is to put the intermediate certificate(s) in the "cacertfile"

_______________________________________________
rabbitmq-discuss mailing list
rabbitmq-disc...@lists.rabbitmq.com
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss

 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Emile Joubert  
View profile  
 More options Mar 14 2012, 6:26 am
From: Emile Joubert <em...@rabbitmq.com>
Date: Wed, 14 Mar 2012 10:26:08 +0000
Local: Wed, Mar 14 2012 6:26 am
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
Hi Carl,

On 13/03/12 22:19, Carl Hörberg wrote:

> but the fix is to put the intermediate certificate(s) in the "cacertfile"

Thanks for reporting back. This is a useful tip for anyone wanting to
make use of intermediate certificates.

-Emile
_______________________________________________
rabbitmq-discuss mailing list
rabbitmq-disc...@lists.rabbitmq.com
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
End of messages
« Back to Discussions « Newer topic     Older topic »