[Mono-list] Trouble establishing client authenticated ssl connection to ActiveMQ using NMS

Dave Curylo curylod at asme.org
Fri Oct 3 00:26:47 UTC 2014


What command did you use to import the certificate?  I'm assuming 'certmgr
--ssl someuri'?

I'm not entirely sure, but you may also need to import root certificates
depending on the generated certificate's trust chain:

mozroots --import --ask-remove --machine

Also, you should not require The ServerCertificateValidationCallback if the
certs are imported into the executing user or the machine store, but it's
not a bad idea just to add logging there in case it's something other than
trust, like hostname validation.  Blindly returning true would be less
secure.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ximian.com/pipermail/mono-list/attachments/20141002/b5837c2f/attachment.html>


More information about the Mono-list mailing list