[AMQ-6665] certificate-based authentication on network bridge fails for nio+ssl protocol

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.14.0
• Fix Version/s: 5.15.0
• Component/s: Network of Brokers
• Assignee: Gary Tully
• Reporter: Gary Tully
• Created: 27/Apr/17 10:57
• Updated: 05/May/17 09:46
• Resolved: 27/Apr/17 11:10

Description

client certificate authentication works in the following scenario:

Broker A
    ...
    <jaasDualAuthenticationPlugin 
        configuration="activemq"
        sslConfiguration="CertLogin" />
    ...
    <transportConnector name="sslTransportConnector" uri="ssl://0.0.0.0:61618?needClientAuth=true&amp;wantClientAuth=true"/>

Broker B

    ...
    networkConnector uri="static://(ssl://localhost:61618)" name="myNetworkConnector" duplex="true" consumerTTL="2" messageTTL="100" dynamicOnly="false">
    ...

But if you change the transport to nio+ssl, the network connector fails with the following message:

INFO | Stopping vm://localhosta#0 because Failed with SecurityException: User name [null] or password is invalid.