You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@qpid.apache.org by Paul Colby <pa...@colby.id.au> on 2012/04/12 04:20:55 UTC
Does the qpid-cluster command support SSL?
Hi,
Just wondering, is the qpid-cluster command line utility meant to support
SSL somehow? ie If my brokers are configured to require encryption, can I
still use the qpid-cluster command? Interested in the answer for both 0.14
(I'm using now), and 0.16 (would love to use soon :)
It looks to me like the answer is "no" for both 0.14 and 0.16... but please
tell me I'm wrong ;)
Thanks! :)
pc
----
http://colby.id.au
Re: Does the qpid-cluster command support SSL?
Posted by Jakub Scholz <ja...@scholz.cz>.
Hi Paul,
when I opened the QPID-3175 the SSL support didn't worked for me even
in combination with PLAIN SASL mechanism. But some sort of SSL
implementation was already present for the code. So it is possible
that I just didn't configured it correctly. Also, I believe the SSL
support in Python changed in Python 2.6 ... that may have also caused
the SSL support to stop working.
Regards
Jakub
On Fri, Apr 13, 2012 at 03:31, Paul Colby <pa...@colby.id.au> wrote:
> Ah ok. I was thinking that since there were so many references to SSL /
> TLS in the python code, that it probably was supported, but needed to be
> switched on explicitly somehow (such as via an amps:ssl:host url) since the
> Py code doesn't understand the NSS environment variables.
>
> I also thought that QPID-3175 may have been limited to the desire to use an
> explicit SSL client certificate (ie for client SSL authentication), not for
> Py SSL in general.
>
> Thanks for clearing it up for me :)
>
> It would have been great if there was some official statement somewhere in
> docs stating the official level of SSL support in the Py tools, but
> assuming they're expected to work properly in 0.16, there's probably no
> need for that now.
>
> Thanks again,
>
> pc
> ----
> http://colby.id.au
>
>
> On Thu, Apr 12, 2012 at 9:34 PM, Pavel Moravec <pm...@redhat.com> wrote:
>
>> Hi Paul,
>> I think the answer is "no", as all qpid-* tools are Python-based and SSL
>> support in Python client is not resolved fully - see
>> https://issues.apache.org/jira/browse/QPID-3175 for details.
>>
>> Kind regards,
>> Pavel Moravec
>>
>>
>> ----- Original Message -----
>> > From: "Paul Colby" <pa...@colby.id.au>
>> > To: users@qpid.apache.org
>> > Sent: Thursday, April 12, 2012 4:20:55 AM
>> > Subject: Does the qpid-cluster command support SSL?
>> >
>> > Hi,
>> >
>> > Just wondering, is the qpid-cluster command line utility meant to
>> > support
>> > SSL somehow? ie If my brokers are configured to require encryption,
>> > can I
>> > still use the qpid-cluster command? Interested in the answer for
>> > both 0.14
>> > (I'm using now), and 0.16 (would love to use soon :)
>> >
>> > It looks to me like the answer is "no" for both 0.14 and 0.16... but
>> > please
>> > tell me I'm wrong ;)
>> >
>> > Thanks! :)
>> >
>> > pc
>> > ----
>> > http://colby.id.au
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
>> For additional commands, e-mail: users-help@qpid.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
For additional commands, e-mail: users-help@qpid.apache.org
Re: Does the qpid-cluster command support SSL?
Posted by Paul Colby <pa...@colby.id.au>.
Ah ok. I was thinking that since there were so many references to SSL /
TLS in the python code, that it probably was supported, but needed to be
switched on explicitly somehow (such as via an amps:ssl:host url) since the
Py code doesn't understand the NSS environment variables.
I also thought that QPID-3175 may have been limited to the desire to use an
explicit SSL client certificate (ie for client SSL authentication), not for
Py SSL in general.
Thanks for clearing it up for me :)
It would have been great if there was some official statement somewhere in
docs stating the official level of SSL support in the Py tools, but
assuming they're expected to work properly in 0.16, there's probably no
need for that now.
Thanks again,
pc
----
http://colby.id.au
On Thu, Apr 12, 2012 at 9:34 PM, Pavel Moravec <pm...@redhat.com> wrote:
> Hi Paul,
> I think the answer is "no", as all qpid-* tools are Python-based and SSL
> support in Python client is not resolved fully - see
> https://issues.apache.org/jira/browse/QPID-3175 for details.
>
> Kind regards,
> Pavel Moravec
>
>
> ----- Original Message -----
> > From: "Paul Colby" <pa...@colby.id.au>
> > To: users@qpid.apache.org
> > Sent: Thursday, April 12, 2012 4:20:55 AM
> > Subject: Does the qpid-cluster command support SSL?
> >
> > Hi,
> >
> > Just wondering, is the qpid-cluster command line utility meant to
> > support
> > SSL somehow? ie If my brokers are configured to require encryption,
> > can I
> > still use the qpid-cluster command? Interested in the answer for
> > both 0.14
> > (I'm using now), and 0.16 (would love to use soon :)
> >
> > It looks to me like the answer is "no" for both 0.14 and 0.16... but
> > please
> > tell me I'm wrong ;)
> >
> > Thanks! :)
> >
> > pc
> > ----
> > http://colby.id.au
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
> For additional commands, e-mail: users-help@qpid.apache.org
>
>
Re: Does the qpid-cluster command support SSL?
Posted by Pavel Moravec <pm...@redhat.com>.
Hi Paul,
I think the answer is "no", as all qpid-* tools are Python-based and SSL support in Python client is not resolved fully - see https://issues.apache.org/jira/browse/QPID-3175 for details.
Kind regards,
Pavel Moravec
----- Original Message -----
> From: "Paul Colby" <pa...@colby.id.au>
> To: users@qpid.apache.org
> Sent: Thursday, April 12, 2012 4:20:55 AM
> Subject: Does the qpid-cluster command support SSL?
>
> Hi,
>
> Just wondering, is the qpid-cluster command line utility meant to
> support
> SSL somehow? ie If my brokers are configured to require encryption,
> can I
> still use the qpid-cluster command? Interested in the answer for
> both 0.14
> (I'm using now), and 0.16 (would love to use soon :)
>
> It looks to me like the answer is "no" for both 0.14 and 0.16... but
> please
> tell me I'm wrong ;)
>
> Thanks! :)
>
> pc
> ----
> http://colby.id.au
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
For additional commands, e-mail: users-help@qpid.apache.org