Two set of certificates test well by openssl ,but one succeeds to config ssl,the other fails

I use ssl on rabbitmq 3.7.11 and erlang 21.3 .At the same time,i use One-way authentication the certificates only exist in rabbitmq.when i use the same app client(python2.7.5) to connect rabbitmq,one succeeds ,the other fails.I use openssl client and server to test both of certificates,both of they are ok. Anyone can tell me the differences?

this is failed certificates config

Certificate chain 0 s:/C=US/ST=Unset/O=Unset/CN=192.168.204.101 i:/C=US/ST=Unset/L=Unset/O=Unset/CN=192.168.204.101 1 s:/C=US/ST=Unset/L=Unset/O=Unset/CN=192.168.204.101 i:/C=US/ST=Unset/L=Unset/O=Unset/CN=192.168.204.101

Server certificate

subject=/C=US/ST=Unset/O=Unset/CN=192.168.204.101 issuer=/C=US/ST=Unset/L=Unset/O=Unset/CN=192.168.204.101

this is successful certificates config

Certificate chain

0 s:/CN=MYguest/O=server i:/CN=MyTestCA 1 s:/CN=MyTestCA i:/CN=MyTestCA

Server certificate

subject=/CN=MYguest/O=server issuer=/CN=MyTestCA

this is rabbitmq error log

2019-04-25 08:38:41.826 [info] <0.566.0> TLS server: In state hello at tls_connection.erl:849 generated SERVER ALERT: Fatal - Handshake Failure - malformed_handshake_data

this is app error log

ensure connection error: SSLError(1, u'[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:579)')

Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/kombu/connection.py", line 494, in _ensured
    return fun(*args, **kwargs)

  File "/usr/lib/python2.7/site-packages/kombu/connection.py", line 569, in __call__
    self.revive(self.connection.default_channel)

  File "/usr/lib/python2.7/site-packages/kombu/connection.py", line 819, in default_channel
    self.connection
  File "/usr/lib/python2.7/site-packages/kombu/connection.py", line 802, in connection
    self._connection = self._establish_connection()

  File "/usr/lib/python2.7/site-packages/kombu/connection.py", line 757, in _establish_connection
    conn = self.transport.establish_connection()

  File "/usr/lib/python2.7/site-packages/kombu/transport/pyamqp.py", line 130, in establish_connection
    conn.connect()

  File "/usr/lib/python2.7/site-packages/amqp/connection.py", line 295, in connect
    self.transport.connect()

  File "/usr/lib/python2.7/site-packages/amqp/transport.py", line 122, in connect
    self.socket_settings, self.read_timeout, self.write_timeout,

  File "/usr/lib/python2.7/site-packages/amqp/transport.py", line 184, in _init_socket
    self._setup_transport()

  File "/usr/lib/python2.7/site-packages/amqp/transport.py", line 289, in _setup_transport
    self.sock = self._wrap_socket(self.sock, **self.sslopts or {})

  File "/usr/lib/python2.7/site-packages/amqp/transport.py", line 296, in _wrap_socket
    return ssl.wrap_socket(sock, **sslopts)

  File "/usr/lib64/python2.7/ssl.py", line 936, in wrap_socket
    ciphers=ciphers)

  File "/usr/lib64/python2.7/ssl.py", line 611, in __init__
    self.do_handshake()

  File "/usr/lib64/python2.7/ssl.py", line 833, in do_handshake
    self._sslobj.do_handshake()

SSLError: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:579)

user10313671

Posted 2019-04-25T07:17:32.803

Reputation: 1

What do you mean by "failed"? More details would help you get an answer. – garethTheRed – 2019-04-25T10:07:23.387

Two set of certificates test well by openssl ,but one succeeds to config ssl,the other fails

Answers