Uploaded image for project: 'AMQ Interconnect'
  1. AMQ Interconnect
  2. ENTMQIC-1982

Qdmanage query doesn't show default ciphers of sslProfile

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • Minor
    • None
    • 1.1.0.GA
    • CLI Tools, Qpid Dispatch Router
    • None
    • Hide

      Setup ssl on Qpid-disaptch node (generate certificates).

      Setup ssl profile without ciphers option in config for example:

      router {
    id: router4
    mode: interior
    allowUnsettledMulticast: True
}

listener {
    sslProfile: Test
    host: 0.0.0.0
    port: 5672
    role: normal
    sasl-mechanisms: ANONYMOUS
    authenticatePeer: no
}

sslProfile {
    name: Test
    certFile: /root/ca/intermediate/certs/router.cert.pem
    keyFile: /root/ca/intermediate/private/router.key.pem
    password: messaging
}

      Run qdmanage on qpid-dispatch node:

      # qdmanage query ciphers
[]
      Show
      Setup ssl on Qpid-disaptch node (generate certificates). Setup ssl profile without ciphers option in config for example: router { id: router4 mode: interior allowUnsettledMulticast: True } listener { sslProfile: Test host: 0.0.0.0 port: 5672 role: normal sasl-mechanisms: ANONYMOUS authenticatePeer: no } sslProfile { name: Test certFile: /root/ca/intermediate/certs/router.cert.pem keyFile: /root/ca/intermediate/ private /router.key.pem password: messaging } Run qdmanage on qpid-dispatch node: # qdmanage query ciphers []

    Description

      Qdmanage doesn't chow default ciphers of sslProfile component in dispatch config file when ciphers aren't specified.

      Example:

      sslProfile {
    name: Test
    certFile: /root/ca/intermediate/certs/router.cert.pem
    keyFile: /root/ca/intermediate/private/router.key.pem
    password: messaging
}

      Attachments

        Issue Links

          relates to

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. ENTMQIC-1945 Make the set of allowed TLS versions and ciphers configurable

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              tross1@redhat.com Ted Ross
              jstejska@redhat.com Jakub Stejskal
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: