"java.net.SocketException: Connection reset" when running a simpleSSL client

[Brams]

Hello all,
I am attempting to create a client/server using the SSL communication. I followed the instructions listed here  (https://www.rabbitmq.com/ssl.html).

I am greeted with this error:

 while running the server :

java.net.SocketException: Connection reset
    at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:113)
    at java.net.SocketOutputStream.write(SocketOutputStream.java:153)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
    at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
    at java.io.DataOutputStream.flush(DataOutputStream.java:123)
    at com.rabbitmq.client.impl.SocketFrameHandler.sendHeader(SocketFrameHandler.java:129)
    at com.rabbitmq.client.impl.SocketFrameHandler.sendHeader(SocketFrameHandler.java:134)
    at com.rabbitmq.client.impl.AMQConnection.start(AMQConnection.java:277)
    at com.rabbitmq.client.ConnectionFactory.newConnection(ConnectionFactory.java:678)
    at com.rabbitmq.client.ConnectionFactory.newConnection(ConnectionFactory.java:722)

while using the client :
Exception in thread "main" java.net.SocketException: Connection reset
    at java.net.SocketInputStream.read(Unknown Source)
    at java.net.SocketInputStream.read(Unknown Source)
    at sun.security.ssl.InputRecord.readFully(Unknown Source)
    at sun.security.ssl.InputRecord.read(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.waitForClose(Unknown Source)
    at sun.security.ssl.HandshakeOutStream.flush(Unknown Source)
    at sun.security.ssl.Handshaker.kickstart(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.kickstartHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.writeRecord(Unknown Source)
    at sun.security.ssl.AppOutputStream.write(Unknown Source)
    at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
    at java.io.BufferedOutputStream.flush(Unknown Source)
    at java.io.DataOutputStream.flush(Unknown Source)
    at com.rabbitmq.client.impl.SocketFrameHandler.sendHeader(SocketFrameHandler.java:129)
    at com.rabbitmq.client.impl.SocketFrameHandler.sendHeader(SocketFrameHandler.java:134)
    at com.rabbitmq.client.impl.AMQConnection.start(AMQConnection.java:277)
    at com.rabbitmq.client.ConnectionFactory.newConnection(ConnectionFactory.java:678)
    at com.rabbitmq.client.ConnectionFactory.newConnection(ConnectionFactory.java:722)
    at rmqClient.simpleSSL.main(simpleSSL.java:23)


here's my rabbit.config file :
[
    {ssl, [{versions, ['tlsv1.2', 'tlsv1.1']}]},
    {
    rabbit,
    [
          {ssl_listeners, [5675]},
      {ssl_options, [{cacertfile,"sslConn/ca_certificate.pem"},
                          {certfile,  "sslConn/server_certificate.pem"},
                          {keyfile,   "sslConn/server_key.pem"},
                          {versions, ['tlsv1.2', 'tlsv1.1']},
                          {ciphers,  [{ecdhe_ecdsa,aes_128_cbc,sha256},
                                      {ecdhe_ecdsa,aes_256_cbc,sha}]}
                         ]},     
          {tcp_listeners, [5672]},
          {loopback_users, []}
        ]
    }
].

here's also my client code :

        factory.setHost("10.3.9.139");
        factory.setPort(5673);
        factory.setUsername("User1");
        factory.setPassword("User1");
        factory.useSslProtocol();

        Connection conn = factory.newConnection();
        Channel channel = conn.createChannel();

        //non-durable, exclusive, auto-delete queue
        channel.queueDeclare("rabbitmq-java-test", false, true, true, null);
        channel.basicPublish("", "rabbitmq-java-test", null, "Hello, World".getBytes());

[Michael Klishin]

You limit RabbitMQ to TLSv1.1 and v1.2 but not RabbitMQ Java client.

See https://github.com/rabbitmq/rabbitmq-java-client/issues/139. You need to configure

the client to use TLSv1.2 (if you are on JDK 7+).

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-user...@googlegroups.com.
To post to this group, send email to rabbitm...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

MK

Staff Software Engineer, Pivotal/RabbitMQ

[Brams]

Hello Michael,
Thank's for your reply.
I made some changes in my code, here's my new code :
      char[] keyPassphrase = "smartrail".toCharArray();
      KeyStore ks = KeyStore.getInstance("PKCS12");
      ks.load(new FileInputStream(PATH+"keycert.p12"), keyPassphrase);

      KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
      kmf.init(ks, keyPassphrase);

      char[] trustPassphrase = "smartrail".toCharArray();
      KeyStore tks = KeyStore.getInstance("JKS");
     tks.load(new FileInputStream(PATH+"rabbitstore"), trustPassphrase);
   
      TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
      tmf.init(tks);

      SSLContext c = SSLContext.getInstance("TLSv1.2");
      c.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

      ConnectionFactory factory = new ConnectionFactory();

      factory.setUsername("User1");
      factory.setPassword("User1");

      factory.setHost("10.3.9.139");

      factory.setPort(5675);
      factory.useSslProtocol(c);

      Connection conn = factory.newConnection();
      Channel channel = conn.createChannel();

      channel.queueDeclare("CnxEntreLots", false, true, true, null);
      channel.basicPublish("", "CnxEntreLots", null, "Hello, World".getBytes());


And here's my rabbitmq.config file :

[
     {ssl, [{versions, ['tlsv1.2']}]},
    {
    rabbit,
    [
          {ssl_listeners, [5675]},
      {ssl_options, [{cacertfile,"testca/cacert.pem"},
                          {certfile,  "server/cert.pem"},
                          {keyfile,   "server/key.pem"},
                          {versions, ['tlsv1.2']},
              {verify,verify_peer},
                          {fail_if_no_peer_cert,false}
                         ]},     
          {tcp_listeners, [5672,5673,5674]}, 
          {loopback_users, []}
        ]
    }
].

I'm still greeted with the same error .

[Michael Klishin]

See RabbitMQ logs.

--

[Brams]

Here's my log file :
=CRASH REPORT==== 4-May-2016::14:52:54 ===
  crasher:
    initial call: tls_connection:init/1
    pid: <0.646.0>
    registered_name: []
    exception exit: {function_clause,
                     [{ssl_connection,terminate,
                       [{function_clause,
                         [{ssl_connection,handle_sync_event,
                           [{new_user,<0.304.0>},
                            {<0.306.0>,#Ref<0.0.0.1989>},
                            error,
                            {{options,
                              {cacertfile,"testca/cacert.pem",{error,enoent}}},
                             {state,server,
                              {#Ref<0.0.0.1987>,<0.306.0>},
                              gen_tcp,tls_connection,tcp,tcp_closed,tcp_error,
                              "localhost",5675,#Port<0.22513>,
                              {ssl_options,undefined,
                               [{3,3}],
                               verify_peer,undefined,false,false,undefined,1,
                               <<"server/cert.pem">>,undefined,
                               <<"server/key.pem">>,undefined,undefined,
                               undefined,<<"testca/cacert.pem">>,undefined,
                               undefined,undefined,undefined,undefined,
                               [<<"À$">>,<<"À(">>,<<"À&">>,<<"À*">>,
                                <<0,107>>,
                                <<0,106>>,
                                <<0,61>>,
                                <<"À#">>,<<"À'">>,<<"À%">>,<<"À)">>,
                                <<0,103>>,
                                <<0,64>>,
                                <<0,60>>,
                                <<"À\n">>,
                                <<192,20>>,
                                <<0,57>>,
                                <<0,56>>,
                                <<192,5>>,
                                <<192,15>>,
                                <<0,53>>,
                                <<"À\b">>,
                                <<192,18>>,
                                <<0,22>>,
                                <<0,19>>,
                                <<192,3>>,
                                <<"À\r">>,
                                <<0,10>>,
                                <<"À\t">>,
                                <<192,19>>,
                                <<0,51>>,
                                <<0,50>>,
                                <<192,4>>,
                                <<192,14>>,
                                <<0,47>>,
                                <<192,7>>,
                                <<192,17>>,
                                <<0,5>>,
                                <<0,4>>,
                                <<0,21>>,
                                <<192,2>>,
                                <<"À\f">>,
                                <<0,9>>],
                               #Fun<ssl.0.69131459>,true,268435456,false,
                               undefined,undefined,false,undefined,undefined,
                               true,undefined},
                              {socket_options,binary,0,0,0,false},
                              {connection_states,
                               {connection_state,
                                {security_parameters,
                                 <<0,0>>,
                                 0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                                 undefined,undefined},
                                undefined,undefined,undefined,undefined,0,
                                undefined,undefined,undefined},
                               {connection_state,
                                {security_parameters,undefined,0,undefined,
                                 undefined,undefined,undefined,undefined,
                                 undefined,undefined,undefined,undefined,
                                 undefined,undefined,undefined,
                                 <<87,41,240,166,146,6,141,57,158,12,108,187,
                                   20,2,237,121,43,210,76,16,52,161,182,209,
                                   252,240,11,92,249,66,201,101>>,
                                 undefined},
                                undefined,undefined,undefined,undefined,
                                undefined,undefined,undefined,undefined},
                               {connection_state,
                                {security_parameters,
                                 <<0,0>>,
                                 0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                                 undefined,undefined},
                                undefined,undefined,undefined,undefined,0,
                                undefined,undefined,undefined},
                               {connection_state,
                                {security_parameters,undefined,0,undefined,
                                 undefined,undefined,undefined,undefined,
                                 undefined,undefined,undefined,undefined,
                                 undefined,undefined,undefined,
                                 <<87,41,240,166,146,6,141,57,158,12,108,187,
                                   20,2,237,121,43,210,76,16,52,161,182,209,
                                   252,240,11,92,249,66,201,101>>,
                                 undefined},
                                undefined,undefined,undefined,undefined,
                                undefined,undefined,undefined,undefined}},
                              {protocol_buffers,[],<<>>,<<>>,[]},
                              undefined,undefined,
                              {session,undefined,undefined,undefined,
                               undefined,undefined,undefined,undefined,new,
                               undefined,undefined},
                              undefined,ssl_session_cache,undefined,false,
                              undefined,
                              {undefined,undefined},
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,undefined,<<>>,
                              {false,first},
                              undefined,undefined,
                              {[],[]},
                              false,true,false,undefined,undefined}}],
                           [{file,"ssl_connection.erl"},{line,612}]},
                          {gen_fsm,handle_msg,7,
                           [{file,"gen_fsm.erl"},{line,505}]},
                          {proc_lib,init_p_do_apply,3,
                           [{file,"proc_lib.erl"},{line,239}]}]},
                        error,
                        {{options,
                          {cacertfile,"testca/cacert.pem",{error,enoent}}},
                         {state,server,
                          {#Ref<0.0.0.1987>,<0.306.0>},
                          gen_tcp,tls_connection,tcp,tcp_closed,tcp_error,
                          "localhost",5675,#Port<0.22513>,
                          {ssl_options,undefined,
                           [{3,3}],
                           verify_peer,undefined,false,false,undefined,1,
                           <<"server/cert.pem">>,undefined,
                           <<"server/key.pem">>,undefined,undefined,undefined,
                           <<"testca/cacert.pem">>,undefined,undefined,
                           undefined,undefined,undefined,
                           [<<"À$">>,<<"À(">>,<<"À&">>,<<"À*">>,
                            <<0,107>>,
                            <<0,106>>,
                            <<0,61>>,
                            <<"À#">>,<<"À'">>,<<"À%">>,<<"À)">>,
                            <<0,103>>,
                            <<0,64>>,
                            <<0,60>>,
                            <<"À\n">>,
                            <<192,20>>,
                            <<0,57>>,
                            <<0,56>>,
                            <<192,5>>,
                            <<192,15>>,
                            <<0,53>>,
                            <<"À\b">>,
                            <<192,18>>,
                            <<0,22>>,
                            <<0,19>>,
                            <<192,3>>,
                            <<"À\r">>,
                            <<0,10>>,
                            <<"À\t">>,
                            <<192,19>>,
                            <<0,51>>,
                            <<0,50>>,
                            <<192,4>>,
                            <<192,14>>,
                            <<0,47>>,
                            <<192,7>>,
                            <<192,17>>,
                            <<0,5>>,
                            <<0,4>>,
                            <<0,21>>,
                            <<192,2>>,
                            <<"À\f">>,
                            <<0,9>>],
                           #Fun<ssl.0.69131459>,true,268435456,false,
                           undefined,undefined,false,undefined,undefined,true,
                           undefined},
                          {socket_options,binary,0,0,0,false},
                          {connection_states,
                           {connection_state,
                            {security_parameters,
                             <<0,0>>,
                             0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                             undefined,undefined},
                            undefined,undefined,undefined,undefined,0,
                            undefined,undefined,undefined},
                           {connection_state,
                            {security_parameters,undefined,0,undefined,
                             undefined,undefined,undefined,undefined,
                             undefined,undefined,undefined,undefined,
                             undefined,undefined,undefined,
                             <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,
                               237,121,43,210,76,16,52,161,182,209,252,240,11,
                               92,249,66,201,101>>,
                             undefined},
                            undefined,undefined,undefined,undefined,undefined,
                            undefined,undefined,undefined},
                           {connection_state,
                            {security_parameters,
                             <<0,0>>,
                             0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                             undefined,undefined},
                            undefined,undefined,undefined,undefined,0,
                            undefined,undefined,undefined},
                           {connection_state,
                            {security_parameters,undefined,0,undefined,
                             undefined,undefined,undefined,undefined,
                             undefined,undefined,undefined,undefined,
                             undefined,undefined,undefined,
                             <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,
                               237,121,43,210,76,16,52,161,182,209,252,240,11,
                               92,249,66,201,101>>,
                             undefined},
                            undefined,undefined,undefined,undefined,undefined,
                            undefined,undefined,undefined}},
                          {protocol_buffers,[],<<>>,<<>>,[]},
                          undefined,undefined,
                          {session,undefined,undefined,undefined,undefined,
                           undefined,undefined,undefined,new,undefined,
                           undefined},
                          undefined,ssl_session_cache,undefined,false,
                          undefined,
                          {undefined,undefined},
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,undefined,<<>>,
                          {false,first},
                          undefined,undefined,
                          {[],[]},
                          false,true,false,undefined,undefined}}],
                       [{file,"ssl_connection.erl"},{line,855}]},
                      {gen_fsm,terminate,7,[{file,"gen_fsm.erl"},{line,597}]},
                      {proc_lib,init_p_do_apply,3,
                       [{file,"proc_lib.erl"},{line,239}]}]}
      in function  gen_fsm:terminate/7 (gen_fsm.erl, line 600)
    ancestors: [tls_connection_sup,ssl_sup,<0.151.0>]
    messages: []
    links: [<0.154.0>,#Port<0.22513>]
    dictionary: [{ssl_manager,ssl_manager}]
    trap_exit: true
    status: running
    heap_size: 987
    stack_size: 27
    reductions: 252
  neighbours:

=SUPERVISOR REPORT==== 4-May-2016::14:52:54 ===
     Supervisor: {local,tls_connection_sup}
     Context:    child_terminated
     Reason:     {function_clause,
                  [{ssl_connection,terminate,
                    [{function_clause,
                      [{ssl_connection,handle_sync_event,
                        [{new_user,<0.304.0>},
                         {<0.306.0>,#Ref<0.0.0.1989>},
                         error,
                         {{options,
                           {cacertfile,"testca/cacert.pem",{error,enoent}}},
                          {state,server,
                           {#Ref<0.0.0.1987>,<0.306.0>},
                           gen_tcp,tls_connection,tcp,tcp_closed,tcp_error,
                           "localhost",5675,#Port<0.22513>,
                           {ssl_options,undefined,
                            [{3,3}],
                            verify_peer,undefined,false,false,undefined,1,
                            <<"server/cert.pem">>,undefined,
                            <<"server/key.pem">>,undefined,undefined,
                            undefined,<<"testca/cacert.pem">>,undefined,
                            undefined,undefined,undefined,undefined,
                            [<<"À$">>,<<"À(">>,<<"À&">>,<<"À*">>,
                             <<0,107>>,
                             <<0,106>>,
                             <<0,61>>,
                             <<"À#">>,<<"À'">>,<<"À%">>,<<"À)">>,
                             <<0,103>>,
                             <<0,64>>,
                             <<0,60>>,
                             <<"À\n">>,
                             <<192,20>>,
                             <<0,57>>,
                             <<0,56>>,
                             <<192,5>>,
                             <<192,15>>,
                             <<0,53>>,
                             <<"À\b">>,
                             <<192,18>>,
                             <<0,22>>,
                             <<0,19>>,
                             <<192,3>>,
                             <<"À\r">>,
                             <<0,10>>,
                             <<"À\t">>,
                             <<192,19>>,
                             <<0,51>>,
                             <<0,50>>,
                             <<192,4>>,
                             <<192,14>>,
                             <<0,47>>,
                             <<192,7>>,
                             <<192,17>>,
                             <<0,5>>,
                             <<0,4>>,
                             <<0,21>>,
                             <<192,2>>,
                             <<"À\f">>,
                             <<0,9>>],
                            #Fun<ssl.0.69131459>,true,268435456,false,
                            undefined,undefined,false,undefined,undefined,
                            true,undefined},
                           {socket_options,binary,0,0,0,false},
                           {connection_states,
                            {connection_state,
                             {security_parameters,
                              <<0,0>>,
                              0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                              undefined,undefined},
                             undefined,undefined,undefined,undefined,0,
                             undefined,undefined,undefined},
                            {connection_state,
                             {security_parameters,undefined,0,undefined,
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,
                              <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,
                                237,121,43,210,76,16,52,161,182,209,252,240,11,
                                92,249,66,201,101>>,
                              undefined},
                             undefined,undefined,undefined,undefined,
                             undefined,undefined,undefined,undefined},
                            {connection_state,
                             {security_parameters,
                              <<0,0>>,
                              0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                              undefined,undefined},
                             undefined,undefined,undefined,undefined,0,
                             undefined,undefined,undefined},
                            {connection_state,
                             {security_parameters,undefined,0,undefined,
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,
                              <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,
                                237,121,43,210,76,16,52,161,182,209,252,240,11,
                                92,249,66,201,101>>,
                              undefined},
                             undefined,undefined,undefined,undefined,
                             undefined,undefined,undefined,undefined}},
                           {protocol_buffers,[],<<>>,<<>>,[]},
                           undefined,undefined,
                           {session,undefined,undefined,undefined,undefined,
                            undefined,undefined,undefined,new,undefined,
                            undefined},
                           undefined,ssl_session_cache,undefined,false,
                           undefined,
                           {undefined,undefined},
                           undefined,undefined,undefined,undefined,undefined,
                           undefined,undefined,undefined,undefined,undefined,
                           undefined,undefined,<<>>,
                           {false,first},
                           undefined,undefined,
                           {[],[]},
                           false,true,false,undefined,undefined}}],
                        [{file,"ssl_connection.erl"},{line,612}]},
                       {gen_fsm,handle_msg,7,
                        [{file,"gen_fsm.erl"},{line,505}]},
                       {proc_lib,init_p_do_apply,3,
                        [{file,"proc_lib.erl"},{line,239}]}]},
                     error,
                     {{options,
                       {cacertfile,"testca/cacert.pem",{error,enoent}}},
                      {state,server,
                       {#Ref<0.0.0.1987>,<0.306.0>},
                       gen_tcp,tls_connection,tcp,tcp_closed,tcp_error,
                       "localhost",5675,#Port<0.22513>,
                       {ssl_options,undefined,
                        [{3,3}],
                        verify_peer,undefined,false,false,undefined,1,
                        <<"server/cert.pem">>,undefined,<<"server/key.pem">>,
                        undefined,undefined,undefined,<<"testca/cacert.pem">>,
                        undefined,undefined,undefined,undefined,undefined,
                        [<<"À$">>,<<"À(">>,<<"À&">>,<<"À*">>,
                         <<0,107>>,
                         <<0,106>>,
                         <<0,61>>,
                         <<"À#">>,<<"À'">>,<<"À%">>,<<"À)">>,
                         <<0,103>>,
                         <<0,64>>,
                         <<0,60>>,
                         <<"À\n">>,
                         <<192,20>>,
                         <<0,57>>,
                         <<0,56>>,
                         <<192,5>>,
                         <<192,15>>,
                         <<0,53>>,
                         <<"À\b">>,
                         <<192,18>>,
                         <<0,22>>,
                         <<0,19>>,
                         <<192,3>>,
                         <<"À\r">>,
                         <<0,10>>,
                         <<"À\t">>,
                         <<192,19>>,
                         <<0,51>>,
                         <<0,50>>,
                         <<192,4>>,
                         <<192,14>>,
                         <<0,47>>,
                         <<192,7>>,
                         <<192,17>>,
                         <<0,5>>,
                         <<0,4>>,
                         <<0,21>>,
                         <<192,2>>,
                         <<"À\f">>,
                         <<0,9>>],
                        #Fun<ssl.0.69131459>,true,268435456,false,undefined,
                        undefined,false,undefined,undefined,true,undefined},
                       {socket_options,binary,0,0,0,false},
                       {connection_states,
                        {connection_state,
                         {security_parameters,
                          <<0,0>>,
                          0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,undefined,
                          undefined},
                         undefined,undefined,undefined,undefined,0,undefined,
                         undefined,undefined},
                        {connection_state,
                         {security_parameters,undefined,0,undefined,
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,
                          <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,237,
                            121,43,210,76,16,52,161,182,209,252,240,11,92,249,
                            66,201,101>>,
                          undefined},
                         undefined,undefined,undefined,undefined,undefined,
                         undefined,undefined,undefined},
                        {connection_state,
                         {security_parameters,
                          <<0,0>>,
                          0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,undefined,
                          undefined},
                         undefined,undefined,undefined,undefined,0,undefined,
                         undefined,undefined},
                        {connection_state,
                         {security_parameters,undefined,0,undefined,
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,
                          <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,237,
                            121,43,210,76,16,52,161,182,209,252,240,11,92,249,
                            66,201,101>>,
                          undefined},
                         undefined,undefined,undefined,undefined,undefined,
                         undefined,undefined,undefined}},
                       {protocol_buffers,[],<<>>,<<>>,[]},
                       undefined,undefined,
                       {session,undefined,undefined,undefined,undefined,
                        undefined,undefined,undefined,new,undefined,undefined},
                       undefined,ssl_session_cache,undefined,false,undefined,
                       {undefined,undefined},
                       undefined,undefined,undefined,undefined,undefined,
                       undefined,undefined,undefined,undefined,undefined,
                       undefined,undefined,<<>>,
                       {false,first},
                       undefined,undefined,
                       {[],[]},
                       false,true,false,undefined,undefined}}],
                    [{file,"ssl_connection.erl"},{line,855}]},
                   {gen_fsm,terminate,7,[{file,"gen_fsm.erl"},{line,597}]},
                   {proc_lib,init_p_do_apply,3,
                    [{file,"proc_lib.erl"},{line,239}]}]}
     Offender:   [{pid,<0.646.0>},
                  {name,undefined},
                  {mfargs,{tls_connection,start_link,undefined}},
                  {restart_type,temporary},
                  {shutdown,4000},
                  {child_type,worker}]


=SUPERVISOR REPORT==== 4-May-2016::14:52:54 ===
     Supervisor: {<0.305.0>,ranch_acceptors_sup}
     Context:    child_terminated
     Reason:     {{function_clause,
                   [{ssl_connection,terminate,
                     [{function_clause,
                       [{ssl_connection,handle_sync_event,
                         [{new_user,<0.304.0>},
                          {<0.306.0>,#Ref<0.0.0.1989>},
                          error,
                          {{options,
                            {cacertfile,"testca/cacert.pem",{error,enoent}}},
                           {state,server,
                            {#Ref<0.0.0.1987>,<0.306.0>},
                            gen_tcp,tls_connection,tcp,tcp_closed,tcp_error,
                            "localhost",5675,#Port<0.22513>,
                            {ssl_options,undefined,
                             [{3,3}],
                             verify_peer,undefined,false,false,undefined,1,
                             <<"server/cert.pem">>,undefined,
                             <<"server/key.pem">>,undefined,undefined,
                             undefined,<<"testca/cacert.pem">>,undefined,
                             undefined,undefined,undefined,undefined,
                             [<<"À$">>,<<"À(">>,<<"À&">>,<<"À*">>,
                              <<0,107>>,
                              <<0,106>>,
                              <<0,61>>,
                              <<"À#">>,<<"À'">>,<<"À%">>,<<"À)">>,
                              <<0,103>>,
                              <<0,64>>,
                              <<0,60>>,
                              <<"À\n">>,
                              <<192,20>>,
                              <<0,57>>,
                              <<0,56>>,
                              <<192,5>>,
                              <<192,15>>,
                              <<0,53>>,
                              <<"À\b">>,
                              <<192,18>>,
                              <<0,22>>,
                              <<0,19>>,
                              <<192,3>>,
                              <<"À\r">>,
                              <<0,10>>,
                              <<"À\t">>,
                              <<192,19>>,
                              <<0,51>>,
                              <<0,50>>,
                              <<192,4>>,
                              <<192,14>>,
                              <<0,47>>,
                              <<192,7>>,
                              <<192,17>>,
                              <<0,5>>,
                              <<0,4>>,
                              <<0,21>>,
                              <<192,2>>,
                              <<"À\f">>,
                              <<0,9>>],
                             #Fun<ssl.0.69131459>,true,268435456,false,
                             undefined,undefined,false,undefined,undefined,
                             true,undefined},
                            {socket_options,binary,0,0,0,false},
                            {connection_states,
                             {connection_state,
                              {security_parameters,
                               <<0,0>>,
                               0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                               undefined,undefined},
                              undefined,undefined,undefined,undefined,0,
                              undefined,undefined,undefined},
                             {connection_state,
                              {security_parameters,undefined,0,undefined,
                               undefined,undefined,undefined,undefined,
                               undefined,undefined,undefined,undefined,
                               undefined,undefined,undefined,
                               <<87,41,240,166,146,6,141,57,158,12,108,187,20,
                                 2,237,121,43,210,76,16,52,161,182,209,252,240,
                                 11,92,249,66,201,101>>,
                               undefined},
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,undefined},
                             {connection_state,
                              {security_parameters,
                               <<0,0>>,
                               0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                               undefined,undefined},
                              undefined,undefined,undefined,undefined,0,
                              undefined,undefined,undefined},
                             {connection_state,
                              {security_parameters,undefined,0,undefined,
                               undefined,undefined,undefined,undefined,
                               undefined,undefined,undefined,undefined,
                               undefined,undefined,undefined,
                               <<87,41,240,166,146,6,141,57,158,12,108,187,20,
                                 2,237,121,43,210,76,16,52,161,182,209,252,240,
                                 11,92,249,66,201,101>>,
                               undefined},
                              undefined,undefined,undefined,undefined,
                              undefined,undefined,undefined,undefined}},
                            {protocol_buffers,[],<<>>,<<>>,[]},
                            undefined,undefined,
                            {session,undefined,undefined,undefined,undefined,
                             undefined,undefined,undefined,new,undefined,
                             undefined},
                            undefined,ssl_session_cache,undefined,false,
                            undefined,
                            {undefined,undefined},
                            undefined,undefined,undefined,undefined,undefined,
                            undefined,undefined,undefined,undefined,undefined,
                            undefined,undefined,<<>>,
                            {false,first},
                            undefined,undefined,
                            {[],[]},
                            false,true,false,undefined,undefined}}],
                         [{file,"ssl_connection.erl"},{line,612}]},
                        {gen_fsm,handle_msg,7,
                         [{file,"gen_fsm.erl"},{line,505}]},
                        {proc_lib,init_p_do_apply,3,
                         [{file,"proc_lib.erl"},{line,239}]}]},
                      error,
                      {{options,
                        {cacertfile,"testca/cacert.pem",{error,enoent}}},
                       {state,server,
                        {#Ref<0.0.0.1987>,<0.306.0>},
                        gen_tcp,tls_connection,tcp,tcp_closed,tcp_error,
                        "localhost",5675,#Port<0.22513>,
                        {ssl_options,undefined,
                         [{3,3}],
                         verify_peer,undefined,false,false,undefined,1,
                         <<"server/cert.pem">>,undefined,<<"server/key.pem">>,
                         undefined,undefined,undefined,
                         <<"testca/cacert.pem">>,undefined,undefined,
                         undefined,undefined,undefined,
                         [<<"À$">>,<<"À(">>,<<"À&">>,<<"À*">>,
                          <<0,107>>,
                          <<0,106>>,
                          <<0,61>>,
                          <<"À#">>,<<"À'">>,<<"À%">>,<<"À)">>,
                          <<0,103>>,
                          <<0,64>>,
                          <<0,60>>,
                          <<"À\n">>,
                          <<192,20>>,
                          <<0,57>>,
                          <<0,56>>,
                          <<192,5>>,
                          <<192,15>>,
                          <<0,53>>,
                          <<"À\b">>,
                          <<192,18>>,
                          <<0,22>>,
                          <<0,19>>,
                          <<192,3>>,
                          <<"À\r">>,
                          <<0,10>>,
                          <<"À\t">>,
                          <<192,19>>,
                          <<0,51>>,
                          <<0,50>>,
                          <<192,4>>,
                          <<192,14>>,
                          <<0,47>>,
                          <<192,7>>,
                          <<192,17>>,
                          <<0,5>>,
                          <<0,4>>,
                          <<0,21>>,
                          <<192,2>>,
                          <<"À\f">>,
                          <<0,9>>],
                         #Fun<ssl.0.69131459>,true,268435456,false,undefined,
                         undefined,false,undefined,undefined,true,undefined},
                        {socket_options,binary,0,0,0,false},
                        {connection_states,
                         {connection_state,
                          {security_parameters,
                           <<0,0>>,
                           0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                           undefined,undefined},
                          undefined,undefined,undefined,undefined,0,undefined,
                          undefined,undefined},
                         {connection_state,
                          {security_parameters,undefined,0,undefined,
                           undefined,undefined,undefined,undefined,undefined,
                           undefined,undefined,undefined,undefined,undefined,
                           undefined,
                           <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,
                             237,121,43,210,76,16,52,161,182,209,252,240,11,92,
                             249,66,201,101>>,
                           undefined},
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,undefined,undefined},
                         {connection_state,
                          {security_parameters,
                           <<0,0>>,
                           0,0,0,0,0,0,0,0,0,0,0,undefined,undefined,
                           undefined,undefined},
                          undefined,undefined,undefined,undefined,0,undefined,
                          undefined,undefined},
                         {connection_state,
                          {security_parameters,undefined,0,undefined,
                           undefined,undefined,undefined,undefined,undefined,
                           undefined,undefined,undefined,undefined,undefined,
                           undefined,
                           <<87,41,240,166,146,6,141,57,158,12,108,187,20,2,
                             237,121,43,210,76,16,52,161,182,209,252,240,11,92,
                             249,66,201,101>>,
                           undefined},
                          undefined,undefined,undefined,undefined,undefined,
                          undefined,undefined,undefined}},
                        {protocol_buffers,[],<<>>,<<>>,[]},
                        undefined,undefined,
                        {session,undefined,undefined,undefined,undefined,
                         undefined,undefined,undefined,new,undefined,
                         undefined},
                        undefined,ssl_session_cache,undefined,false,undefined,
                        {undefined,undefined},
                        undefined,undefined,undefined,undefined,undefined,
                        undefined,undefined,undefined,undefined,undefined,
                        undefined,undefined,<<>>,
                        {false,first},
                        undefined,undefined,
                        {[],[]},
                        false,true,false,undefined,undefined}}],
                     [{file,"ssl_connection.erl"},{line,855}]},
                    {gen_fsm,terminate,7,[{file,"gen_fsm.erl"},{line,597}]},
                    {proc_lib,init_p_do_apply,3,
                     [{file,"proc_lib.erl"},{line,239}]}]},
                  {gen_fsm,sync_send_all_state_event,
                   [<0.646.0>,{new_user,<0.304.0>},infinity]}}
     Offender:   [{pid,<0.306.0>},
                  {name,{acceptor,<0.305.0>,1}},
                  {mfargs,
                   {ranch_acceptor,start_link,
                    [{sslsocket,nil,
                      {#Port<0.22364>,
                       {config,
                        {ssl_options,undefined,
                         [{3,3}],
                         verify_peer,undefined,false,false,undefined,1,
                         <<"server/cert.pem">>,undefined,<<"server/key.pem">>,
                         undefined,[],undefined,<<"testca/cacert.pem">>,
                         undefined,undefined,undefined,undefined,undefined,
                         [<<"À$">>,<<"À(">>,<<"À&">>,<<"À*">>,
                          <<0,107>>,
                          <<0,106>>,
                          <<0,61>>,
                          <<"À#">>,<<"À'">>,<<"À%">>,<<"À)">>,
                          <<0,103>>,
                          <<0,64>>,
                          <<0,60>>,
                          <<"À\n">>,
                          <<192,20>>,
                          <<0,57>>,
                          <<0,56>>,
                          <<192,5>>,
                          <<192,15>>,
                          <<0,53>>,
                          <<"À\b">>,
                          <<192,18>>,
                          <<0,22>>,
                          <<0,19>>,
                          <<192,3>>,
                          <<"À\r">>,
                          <<0,10>>,
                          <<"À\t">>,
                          <<192,19>>,
                          <<0,51>>,
                          <<0,50>>,
                          <<192,4>>,
                          <<192,14>>,
                          <<0,47>>,
                          <<192,7>>,
                          <<192,17>>,
                          <<0,5>>,
                          <<0,4>>,
                          <<0,21>>,
                          <<192,2>>,
                          <<"À\f">>,
                          <<0,9>>],
                         #Fun<ssl.0.69131459>,true,268435456,false,undefined,
                         undefined,false,undefined,undefined,true,undefined},
                        [inet6,
                         {mode,binary},
                         {active,false},
                         {packet,raw},
                         {reuseaddr,true},
                         {nodelay,true},
                         {send_timeout_close,true},
                         {send_timeout,30000},
                         {port,5675},
                         {ip,{0,0,0,0,0,0,0,0}},
                         {backlog,128},
                         {linger,{true,0}},
                         {exit_on_close,false}],
                        {socket_options,binary,raw,0,0,false},
                        [{exit_on_close,false},
                         {linger,{true,0}},
                         {backlog,128},
                         {ip,{0,0,0,0,0,0,0,0}},
                         {port,5675},
                         {send_timeout,30000},
                         {send_timeout_close,true},
                         {nodelay,true},
                         {reuseaddr,true},
                         inet6,
                         {packet_size,0},
                         {packet,0},
                         {header,0},
                         {active,false},
                         {mode,binary}],
                        {gen_tcp,tcp,tcp_closed,tcp_error},
                        tls_connection}}},
                     ranch_ssl,<0.304.0>]}},
                  {restart_type,permanent},
                  {shutdown,brutal_kill},
                  {child_type,worker}]
 

[Michael Klishin]

On 4 May 2016 at 16:03:33, Brams (brahim...@gmail.com) wrote:
> {cacertfile,"testca/cacert.pem",{error,enoent}}},

ENOENT means RabbitMQ fails to load the CA certificate file at "testca/cacert.pem" because
it or its enclosing directory does not exist 

[Brams]

Indeed, i've got the wrong paths in my rabbitmq.conf file.
Thank's it works now

[Michael Klishin]

FWIW in 3.7.0 thanks to validation in the new config format, this would have been caught at server boot time.