Question About SSL Connection

[subhidh-agarwal]

I have a similar requirement - https://arkmq.org/docs/tutorials/send_receive_ingress/
The problem im facing - I dont have a trust cert becasue the cert (broker.ks) is issued by Lets Encrypt. So not sure how do I do this.

and also , How can I make my custom host for ingress? As of now i see it follows a pattern.

Below mentioned is the broker

apiVersion: broker.amq.io/v1beta1
kind: ActiveMQArtemis
metadata:
  name: artemis-broker
spec:
  deploymentPlan:
    size: 1
    resources:
      limits:
        cpu: "2"
        memory: "4Gi"
      requests:
        cpu: "1"
        memory: "2Gi"
  ingressDomain: amq-operator.company.net
  acceptors:
  - name: sslacceptor
    protocols: all
    port: 62626
    expose: true
    sslEnabled: true
    sslSecret: tls-activemq-operator

The host created is - artemis-broker-sslacceptor-0-svc-ing-amq-mvp.amq-operator.company.net
I needed something else like - broker1.amq-operator.company.net

[brusdev]

The java trust store (client.ts) in the tls-activemq-operator should include all the certificates to trust your clients. It is required only if your client certificate is not signed by a trusted Certificate Authority.

The host for ingress can be customized by setting the ingress IngressHost, i.e.

  acceptors:
  - name: sslacceptor
    ingressHost: broker1.amq-operator.company.net

The ingressHost field supports the following variables: $(CR_NAME), $(CR_NAMESPACE), $(BROKER_ORDINAL), $(ITEM_NAME), $(RES_NAME) and $(INGRESS_DOMAIN).

[subhidh-agarwal]

        at org.apache.activemq.artemis.core.remoting.impl.netty.NettyAcceptor.loadSSLContext(NettyAcceptor.java:404) ~[artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.netty.NettyAcceptor.<init>(NettyAcceptor.java:349) ~[artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.netty.NettyAcceptorFactory.createAcceptor(NettyAcceptorFactory.java:43) ~[artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.server.impl.RemotingServiceImpl.createAcceptor(RemotingServiceImpl.java:267) [artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.server.impl.RemotingServiceImpl.start(RemotingServiceImpl.java:210) [artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.server.impl.ActiveMQServerImpl.initialisePart2(ActiveMQServerImpl.java:3560) [artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.server.impl.PrimaryOnlyActivation.run(PrimaryOnlyActivation.java:78) [artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.server.impl.ActiveMQServerImpl.internalStart(ActiveMQServerImpl.java:742) [artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.server.impl.ActiveMQServerImpl.start(ActiveMQServerImpl.java:632) [artemis-server-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.integration.FileBroker.start(FileBroker.java:66) [artemis-cli-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.cli.commands.Run.execute(Run.java:134) [artemis-cli-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.cli.Artemis.internalExecute(Artemis.java:225) [artemis-cli-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.cli.Artemis.execute(Artemis.java:171) [artemis-cli-2.39.0.jar:2.39.0]
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) ~[?:?]
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
        at java.base/java.lang.reflect.Method.invoke(Method.java:569) ~[?:?]
        at org.apache.activemq.artemis.boot.Artemis.execute(Artemis.java:152) [artemis-boot.jar:2.39.0]
        at org.apache.activemq.artemis.boot.Artemis.main(Artemis.java:64) [artemis-boot.jar:2.39.0]
Caused by: java.lang.Exception: Failed to find a store at /etc/tls-activemq-operator-volume/client.ts
        at org.apache.activemq.artemis.core.remoting.impl.ssl.SSLSupport.validateStoreURL(SSLSupport.java:409) ~[artemis-core-client-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.ssl.SSLSupport.loadKeystore(SSLSupport.java:340) ~[artemis-core-client-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.ssl.SSLSupport.loadTrustManagerFactory(SSLSupport.java:289) ~[artemis-core-client-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.ssl.SSLSupport.loadTrustManagers(SSLSupport.java:314) ~[artemis-core-client-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.ssl.SSLSupport.createContext(SSLSupport.java:223) ~[artemis-core-client-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.ssl.DefaultSSLContextFactory.getSSLContext(DefaultSSLContextFactory.java:50) ~[artemis-core-client-2.39.0.jar:2.39.0]
        at org.apache.activemq.artemis.core.remoting.impl.netty.NettyAcceptor.loadSSLContext(NettyAcceptor.java:401) ~[artemis-server-2.39.0.jar:2.39.0]
        ... 18 more

I get this error when my secret doesnt have client.ts

[brusdev]

The client.ts must exist but it can be an empty java key store.

[subhidh-agarwal]

Thanks this worked