[AMQCPP-421] cms crashing when SSL certificate's subject alternative name doesn't match the specified in failover URI

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 3.4.0, 3.4.2
• Component/s: CMS Impl, Decaf

Environment

Windows 7, self-signed SSL certificate. Broker version is 5.6.0

• Assignee: Timothy A. Bish
• Reporter: Mikhail Melamud
• Created: 13/Aug/12 19:22
• Updated: 13/Aug/12 21:07
• Resolved: 13/Aug/12 21:06

Description

When we specify self-signed certificate in PEM-formatted file as value of the "decaf.net.ssl.trustStore" property and SAN that does't match any name in failover URI, cms is crashing on "R6025 Pure Virtual Function Call" run-time error. I think, the issue can be attributed to multithreading... After Server Certificate Name doesn't match the URI Host Name value. exception is thrown, CMS is trying to fire an exception using listener pointer that is not instantiated properly in void TransportFilter::fire( const decaf::lang::Exception& ex ) method... It is not happening all the time, so a simple unit test won't do... I'm attaching a bit re-factored HelloWorldProducer app and the certificate file that I used... There is possibility that it has something to with InactivityMonitor injected into transport filter chain... When I tried "failover://(ssl://dev1467:61618?transport.useInactivityMonitor=false) instead of "failover://(ssl://dev1467:61618)" it behaves much more stable, i.e. client app can be re-run many more times without a crash, still crashing though in OpenFormatNegotiator

Issue Links

• duplicates: AMQCPP-422 When we specify self-signed certificate in PEM-formatted file as value of the "decaf.net.ssl.trustStore" property and SAN that does't match any name in failover URI, cms is crashing on "R6025 Pure Virtual Function Call" run-time error.