Uploaded image for project: 'AMQ Interconnect'
  1. AMQ Interconnect
  2. ENTMQIC-72

Connections between clients and router or a router and another router should be able to be secured utilizing SSLTLS/SASL to encrypt the connections.

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Done
    • Icon: Major Major
    • 1.0
    • None
    • None
    • ToDo fill in Epic name
    • Documentation (Ref Guide, User Guide, etc.)
    • Done
    • 0
    • 0% 0%

      Check if is SSL2 and SSL3 deprecated for Interconnect. (SECURITY) --> Currently secure is TLS 1.0, TLS 1.1 and TLS 1.2

      Only SSL for router:

      ssl-profile {
          name: ssl1
          cert-db: ca.pem
          cert-file: server.pem
          key-file: private-key.pem
          password: password
      }
      
      listener {
          ssl-profile: ssl1
          host: 0.0.0.0
          port: 22016
          sasl-mechanisms: ANONYMOUS
      }
      

      Only SASL for router:

      On Linux systems, the SASL configuration file is generally found in /etc/sasl2/qpidd.conf or /usr/lib/sasl2/qpidd.conf.

      Add user to sasl: saslpasswd2 -f /var/lib/qpidd/qpidd.sasldb -u realm new_user_name
      *List sasl: *sasldblistusers2 -f /var/lib/qpidd/qpidd.sasldb

      listener {
          host: 0.0.0.0
          port: 22016
          sasl-mechanisms: PLAIN
      }
      

            tross1@redhat.com Ted Ross
            rhn-support-esammons Eric Sammons (Inactive)
            Dominik Lenosi Dominik Lenosi
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: