[AMQCPP-348] Allow unverified SSL peer

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.2.4
• Fix Version/s: 3.2.5, 3.3.0
• Assignee: Timothy A. Bish
• Reporter: Kevin Quick
• Created: 21/Jan/11 23:28
• Updated: 07/Feb/11 19:55
• Resolved: 07/Feb/11 19:55

Description

When using an ssl: connection, attempting to only provide a client certificate via:

decaf::lang::System::setProperty("decaf.net.ssl.keyStore", certfile);

fails with the following:

Error occurred while accessing an OpenSSL library method:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Init failure ERROR: Error occurred while accessing an OpenSSL library method:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

It would be nice if the library would set peer_verify to false if no decaf.net.ssl.trustStore was provided to allow the client to bypass verification of the broker.