Test mtls over mqtt

Author: MarcialRosales

selenium/bin/suite_template

@@ -407,7 +407,7 @@ do_generate-ca-server-client-kpi() {
     print "Used this openssl.conf"
     cat openssl.cnf
   fi
-  make CN=$NAME
+  make CN=$NAME CLIENT_ALT_NAME=internaluser
   #make PASSWORD=foobar
   #make verify
   #make info

selenium/suites/authnz-messaging/auth-internal-mtls-backend.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+SCRIPT="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+TEST_CASES_PATH=/authnz-msg-protocols
+PROFILES="internal-user auth_backends-internal tls auth-mtls"
+
+source $SCRIPT/../../bin/suite_template
+run

selenium/test/authnz-msg-protocols/mqtt.js

@@ -20,7 +20,7 @@ describe('Having MQTT protocol enbled and the following auth_backends: ' + backe
   let mqttUrl = process.env.RABBITMQ_MQTT_URL || "mqtt://" + rabbit + ":1883"
   let username = process.env.RABBITMQ_AMQP_USERNAME
   let password = process.env.RABBITMQ_AMQP_PASSWORD
-  let client_id = process.env.RABBITMQ_AMQP_CLIENT_ID || 'selenium-client'
+  let client_id = process.env.RABBITMQ_AMQP_USERNAME || 'selenium-client'
 
   console.log("RABBITMQ_CERTS : " + process.env.RABBITMQ_CERTS)
 

selenium/test/authnz-msg-protocols/rabbitmq.auth-mtls.conf

@@ -0,0 +1,8 @@
+
+mqtt.ssl_cert_login = true
+ssl_cert_login_from = subject_alternative_name
+ssl_cert_login_san_type = dns 
+ssl_cert_login_san_index = 1 
+mqtt.ssl_cert_client_id_from = subject_alternative_name
+mqtt.ssl_cert_login_san_type = dns
+mqtt.ssl_cert_login_san_index = 1