Why is SSL working without any Certificate?

[Lars Ellebo]

Hi

I have enabled SSL on port 5671 on my RabbiMQ Server,
and I have enabled SSL on my Client using the "factory.useSslProtocol()" statement,
and it seems to be working fine!

This actually surprises me because I have not installed any certificate on my RabbitMQ Server yet.

Why does SSL work without any installed certificate?
Is my AMQP traffic really encrypted in this situation?

/Lars

[Simon MacMullen-2]

On 14/03/12 12:37, Lars Ellebo wrote:

> I have enabled SSL on port 5671 on my RabbiMQ Server,
> and I have enabled SSL on my Client using the "factory.useSslProtocol()"
> statement,
> and it seems to be working fine!
>
> This actually surprises me because I have not installed any certificate on
> my RabbitMQ Server yet.
>
> Why does SSL work without any installed certificate?
> Is my AMQP traffic really encrypted in this situation?

Well I can't get this configuration to work.

RabbitMQ will start up with a broken SSL configuration, but as soon as
you try to make an SSL connection it will fail.

So: are you sure you are *really* connecting to port 5671? What does
mgmt / rabbitmqctl say? What if you put "{tcp_listeners, []}" in your
configuration, to stop the non-ssl port from being opened?

Cheers, Simon

--
Simon MacMullen
RabbitMQ, VMware
_______________________________________________
rabbitmq-discuss mailing list
[hidden email]
https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss