SSL w/ intermediate certificate
The group you are posting to is a
Usenet group . Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
From:
Carl Hörberg <carl.hoerb... @gmail.com>
Date: Sun, 11 Mar 2012 11:05:43 -0700 (PDT)
Local: Sun, Mar 11 2012 2:05 pm
Subject: [rabbitmq-discuss] SSL w/ intermediate certificate
Can I somehow include an intermediate certificate in the certfile?
when i try i get the following error in the rabbitmq log when i access the management interface:
=ERROR REPORT==== 11-Mar-2012::14:44:02 === SSL: 1084: error:[...skipping...] /etc/rabbitmq/ssl.pem [{ssl_connection,init_certificates,5}, {ssl_connection,ssl_init,2}, {ssl_connection,init,1}, {gen_fsm,init_it,6}, {proc_lib,init_p_do_apply,3}]
=ERROR REPORT==== 11-Mar-2012::17:29:15 === application: mochiweb "Accept failed error" "{error,ecertfile}"
_______________________________________________ rabbitmq-discuss mailing list rabbitmq-disc... @lists.rabbitmq.com https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
You must
Sign in before you can post messages.
You do not have the permission required to post.
From:
Emile Joubert <em... @rabbitmq.com>
Date: Mon, 12 Mar 2012 10:29:01 +0000
Local: Mon, Mar 12 2012 6:29 am
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
Hi Carl,
On 11/03/12 18:05, Carl Hörberg wrote:
> =ERROR REPORT==== 11-Mar-2012::17:29:15 === > application: mochiweb > "Accept failed error" > "{error,ecertfile}"
This error normally means there is something wrong with the certificate,
but it's not possible to provide a more precise diagnosis without more
details.
You can test it by using the certificate to create an SSL connection with the OpenSSL s_server option.
How did you create the certificate? You should double-check the commands used.
-Emile _______________________________________________ rabbitmq-discuss mailing list rabbitmq-disc... @lists.rabbitmq.com https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
You must
Sign in before you can post messages.
You do not have the permission required to post.
From:
Carl Hörberg <carl.hoerb... @gmail.com>
Date: Mon, 12 Mar 2012 13:24:50 +0100
Local: Mon, Mar 12 2012 8:24 am
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
cat ssl.crt ssl.key intermediate.crt > ssl.pem
anyway.. it seems to work fine with just:
cat ssl.crt ssl.key > ssl.pem
On Mon, Mar 12, 2012 at 11:29, Emile Joubert <em
... @rabbitmq.com> wrote:
> Hi Carl,
> On 11/03/12 18:05, Carl Hörberg wrote: >> =ERROR REPORT==== 11-Mar-2012::17:29:15 === >> application: mochiweb >> "Accept failed error" >> "{error,ecertfile}"
> This error normally means there is something wrong with the certificate, > but it's not possible to provide a more precise diagnosis without more > details.
> You can test it by using the certificate to create an SSL connection > with the OpenSSL s_server option.
> How did you create the certificate? You should double-check the commands > used.
> -Emile
_______________________________________________
rabbitmq-discuss mailing list
rabbitmq-disc
... @lists.rabbitmq.com
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
You must
Sign in before you can post messages.
You do not have the permission required to post.
From:
Carl Hörberg <carl.hoerb... @gmail.com>
Date: Tue, 13 Mar 2012 23:19:15 +0100
Local: Tues, Mar 13 2012 6:19 pm
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
it works fine for most web browsers, but not with eg. openssl s_client etc.
but the fix is to put the intermediate certificate(s) in the "cacertfile"
On Mon, Mar 12, 2012 at 13:24, Carl Hörberg <carl.hoerb
... @gmail.com> wrote:
> cat ssl.crt ssl.key intermediate.crt > ssl.pem
> anyway.. it seems to work fine with just:
> cat ssl.crt ssl.key > ssl.pem
> On Mon, Mar 12, 2012 at 11:29, Emile Joubert <em... @rabbitmq.com> wrote: >> Hi Carl,
>> On 11/03/12 18:05, Carl Hörberg wrote: >>> =ERROR REPORT==== 11-Mar-2012::17:29:15 === >>> application: mochiweb >>> "Accept failed error" >>> "{error,ecertfile}"
>> This error normally means there is something wrong with the certificate, >> but it's not possible to provide a more precise diagnosis without more >> details.
>> You can test it by using the certificate to create an SSL connection >> with the OpenSSL s_server option.
>> How did you create the certificate? You should double-check the commands >> used.
>> -Emile
_______________________________________________
rabbitmq-discuss mailing list
rabbitmq-disc
... @lists.rabbitmq.com
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
You must
Sign in before you can post messages.
You do not have the permission required to post.
From:
Emile Joubert <em... @rabbitmq.com>
Date: Wed, 14 Mar 2012 10:26:08 +0000
Local: Wed, Mar 14 2012 6:26 am
Subject: Re: [rabbitmq-discuss] SSL w/ intermediate certificate
Hi Carl,
On 13/03/12 22:19, Carl Hörberg wrote:
> but the fix is to put the intermediate certificate(s) in the "cacertfile"
Thanks for reporting back. This is a useful tip for anyone wanting to
make use of intermediate certificates.
-Emile _______________________________________________ rabbitmq-discuss mailing list rabbitmq-disc... @lists.rabbitmq.com https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
You must
Sign in before you can post messages.
You do not have the permission required to post.