[AMQ-5753] Not possible to use custom truststore via org.apache.activemq.jndi.ActiveMQInitialContextFactory (within a WebLogic Foreign Server)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 5.8.0
• Patch Info: Patch Available
• Assignee: Unassigned
• Reporter: Bernhard Trummer
• Created: 29/Apr/15 15:42
• Updated: 04/Nov/16 12:34
• Resolved: 04/Nov/16 12:34

Description

In our WebLogic integration we use a JMS Foreign Server using org.apache.activemq.jndi.ActiveMQInitialContextFactory. When using an SSL connection, then the activemq-client will only "see" the trust store specified with the JVM option -Djavax.net.ssl.trustStore.
There's no way to specify a custom trust store (and key store) via the initial context properties.

See attached patch, where I added this feature (based on 5.8.0 release). In order to specify a custom trust store, add the following properties to the initial context:

• ssl.trustStore=/path/to/broker.ts
• ssl.trustStorePassword=password

I can confirm that this patch works with ApacheMQ 5.8.0 and WebLogic 10.3.6.0. I also added properties for ssl.keyStore and ssl.keyStorePassword, but I didn't test connecting with SSL client certificates yet.

Issue Links

• duplicates: AMQ-6489 Support SSL configuration using JNDI