ConsumeJMS with ActiveMQ over SSL in NiFi 1.4.0 (cross-post)

[Brian Ghigiarelli <br...@gmail.com>]

( Sorry for the duplication, but I figured this would be better sent to the
"users" alias vs. the "dev" alias... )

I'm having a bit of trouble getting an ActiveMQ v5.14 JMS consumer up and
running over SSL with the new-ish ConsumeJMS processor, and was wondering
if anyone has any pointers on where to start.

ConsumeJMS using a JMSConnectionFactoryProvider configured with a
StandardSSLContextService and the MQ ConnectionFactory Implementation of
"org.apache.activemq.ActiveMQSslConnectionFactory" throws the typical
SSLHandshakeException ("unable to find valid certification path to
requested target") whenever I try to start the consume processor.

However, I'm using that the same StandardSSLContextService for GetJMSTopic
(as well as in other processors) and everything's working fine. I'd like to
switch to ConsumeJMS for its shared resources and expression language
support for the Broker URI, though.

Any ideas on where to start troubleshooting? Has anyone else solved this?

Thanks in advance,
Brian

Re: ConsumeJMS with ActiveMQ over SSL in NiFi 1.4.0 (cross-post)

[Michael Moser <mo...@gmail.com>]

I placed some sample code in a Github project [1] to give you an idea of
how a custom JMS ConnectionFactory provider can be created for Apache NiFi.

[1] - https://github.com/mosermw/nifi-jms-providers-bundle

-- Mike



On Thu, Dec 7, 2017 at 7:28 AM, jhershcopf <ja...@gdit.com> wrote:

> Were you ever able to resolve this issue? We're running in to the same
> thing,
> with the same symptoms, and can't seem to track down the root cause.
>
>
>
> --
> Sent from: http://apache-nifi-users-list.2361937.n4.nabble.com/
>

Re: ConsumeJMS with ActiveMQ over SSL in NiFi 1.4.0 (cross-post)

[jhershcopf <ja...@gdit.com>]

Were you ever able to resolve this issue? We're running in to the same thing,
with the same symptoms, and can't seem to track down the root cause.



--
Sent from: http://apache-nifi-users-list.2361937.n4.nabble.com/

Re: ConsumeJMS with ActiveMQ over SSL in NiFi 1.4.0 (cross-post)

[Michael Moser <mo...@gmail.com>]

Hi Brian,

I noticed the same behavior with the JMSConnectionFactoryProvider, i.e. I
could not figure out how to configure it to work with ActiveMQ SSL.

I ended up writing my own ActiveMQConnectionFactoryProvider which
instantiates the ActiveMQSslConnectionFactory class.  It was much easier
for my deployments to bundle the ActiveMQ jars inside my new NAR anyway.

Regards,
-- Mike


On Thu, Oct 26, 2017 at 11:36 AM, Joe Witt <jo...@gmail.com> wrote:

> Brian - there just might not be a lot of folks running into it. You
> might be in a situation where you'll have to dig in a good bit. If
> you've not filed a JIRA with the stacktrace (and the
> environmental/setup info you're mentioning here) already that would be
> a good starting point that may also get additional eyes on.
>
> On Thu, Oct 26, 2017 at 10:13 AM, Brian Ghigiarelli <br...@gmail.com>
> wrote:
> > ( Sorry for the duplication, but I figured this would be better sent to
> the
> > "users" alias vs. the "dev" alias... )
> >
> > I'm having a bit of trouble getting an ActiveMQ v5.14 JMS consumer up and
> > running over SSL with the new-ish ConsumeJMS processor, and was
> wondering if
> > anyone has any pointers on where to start.
> >
> > ConsumeJMS using a JMSConnectionFactoryProvider configured with a
> > StandardSSLContextService and the MQ ConnectionFactory Implementation of
> > "org.apache.activemq.ActiveMQSslConnectionFactory" throws the typical
> > SSLHandshakeException ("unable to find valid certification path to
> requested
> > target") whenever I try to start the consume processor.
> >
> > However, I'm using that the same StandardSSLContextService for
> GetJMSTopic
> > (as well as in other processors) and everything's working fine. I'd like
> to
> > switch to ConsumeJMS for its shared resources and expression language
> > support for the Broker URI, though.
> >
> > Any ideas on where to start troubleshooting? Has anyone else solved this?
> >
> > Thanks in advance,
> > Brian
>

Re: ConsumeJMS with ActiveMQ over SSL in NiFi 1.4.0 (cross-post)

[Joe Witt <jo...@gmail.com>]

Brian - there just might not be a lot of folks running into it. You
might be in a situation where you'll have to dig in a good bit. If
you've not filed a JIRA with the stacktrace (and the
environmental/setup info you're mentioning here) already that would be
a good starting point that may also get additional eyes on.

On Thu, Oct 26, 2017 at 10:13 AM, Brian Ghigiarelli <br...@gmail.com> wrote:
> ( Sorry for the duplication, but I figured this would be better sent to the
> "users" alias vs. the "dev" alias... )
>
> I'm having a bit of trouble getting an ActiveMQ v5.14 JMS consumer up and
> running over SSL with the new-ish ConsumeJMS processor, and was wondering if
> anyone has any pointers on where to start.
>
> ConsumeJMS using a JMSConnectionFactoryProvider configured with a
> StandardSSLContextService and the MQ ConnectionFactory Implementation of
> "org.apache.activemq.ActiveMQSslConnectionFactory" throws the typical
> SSLHandshakeException ("unable to find valid certification path to requested
> target") whenever I try to start the consume processor.
>
> However, I'm using that the same StandardSSLContextService for GetJMSTopic
> (as well as in other processors) and everything's working fine. I'd like to
> switch to ConsumeJMS for its shared resources and expression language
> support for the Broker URI, though.
>
> Any ideas on where to start troubleshooting? Has anyone else solved this?
>
> Thanks in advance,
> Brian