Red Hat Bugzilla – Bug 862561
Support for ssl-require-client-authentication=yes
Last modified: 2016-05-26 16:23:26 EDT
Description of problem:
Recently python clients (qpid-stat, qpid-config, qpid-tool) from Messaging started to support option 'ssl-require-client-authentication=yes'.
What does this option do?
Forces clients to authenticate in order to establish an SSL connection.
Who can be affected?
When users start using this option cumin stops working over ssl, but diagnostic python tools will still work.
See linked BZs for more information.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Setup broker with 'ssl-require-client-authentication=yes'
2. Try to use cumin-broker configuration with SSL according to MCIG
cumin doesn't connect to broker
cumin set according to documentation works over ssl
a) mention unsupported 'ssl-require-client-authentication=yes' in MCIG
b) fix cumin to work with both (yes/no) authentication options
MRG-Grid is in maintenance and only customer escalations will be considered. This issue can be reopened if a customer escalation associated with it occurs.