Authentication based on SSL certificate fails for secure WebSockets transport wss://

Solution Verified - Updated -

Issue

We connect to ActiveMQ securely over Web Sockets transport wss://
The broker is configured for secure Web Sockets

 <transportConnector name="wss" uri="wss://0.0.0.0:61618?transport.needClientAuth=true"/>

and also authenticates the client by either of the two JAAS plugins

<plugins>
  <jaasCertificateAuthenticationPlugin configuration="..." />
  <jaasDualAuthenticationPlugin configuration="..." sslConfiguration="..."/>
</plugins>

But authentication always fails based on the clients SSL certificate!!
Depending on the JAAS plugin used, authentication either fails with

java.lang.SecurityException: Unable to authenticate transport without SSL certificate.

in case of using <jaasCertificateAuthenticationPlugin> or

User name [null] or password is invalid.

in case of using <jaasDualAuthenticationPlugin>

Environment

  • JBoss A-MQ 6.1
  • JBoss A-MQ 6.2

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.