You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@activemq.apache.org by "Timothy Bish (JIRA)" <ji...@apache.org> on 2011/01/24 16:07:44 UTC

[jira] Resolved: (AMQNET-311) Stomp SSL: No certificates loaded from key-store

     [ https://issues.apache.org/jira/browse/AMQNET-311?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Timothy Bish resolved AMQNET-311.
---------------------------------

    Resolution: Fixed
      Assignee: Timothy Bish  (was: Jim Gomes)

Fixed in trunk for both NMS.Stomp and NMS.ActiveMQ.  Fix merged to NMS.Stomp 1.5.x branch.

> Stomp SSL: No certificates loaded from key-store
> ------------------------------------------------
>
>                 Key: AMQNET-311
>                 URL: https://issues.apache.org/jira/browse/AMQNET-311
>             Project: ActiveMQ .Net
>          Issue Type: Bug
>          Components: ActiveMQ, Stomp
>    Affects Versions: 1.5.0
>         Environment: Windows
>            Reporter: Markus Jung | Ogitix
>            Assignee: Timothy Bish
>            Priority: Minor
>             Fix For: 1.5.1
>
>         Attachments: example_app.cs
>
>
> Not using the transport option clientCertFilename the certificates should be loaded from X509Store at class Apache.NMS.Stomp.Transport.Tcp.SslTransport method LoadCertificates.
> But the collection store.Certificates is always empty, causing SelectLocalCertificate to always returning null.
> This is not a big problem, because the connection is working using null. But maybe with an unexpected behavior if one is going to use the clientCertSubject transport option.
> The reason is, the store must be opened (and closed):
> Changing the lines in LoadCertificates to:
>                 X509Store store = new X509Store(name, location);
>                 store.Open(OpenFlags.ReadOnly);
>                 collection = store.Certificates;
>                 store.Close();
> the collection is not empty anymore.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.