(devo)15:19:43[stomp.py-2.0]itgs04$openssl s_client -connect vtb-generic-40:6162 -CApath /etc/grid-security/certificates -cert /Users/jamesc/.globus/usercert.pem -key /Users/jamesc/.globus/userkey.pem -state Enter pass phrase for /Users/jamesc/.globus/userkey.pem: CONNECTED(00000003) SSL_connect:before/connect initialization SSL_connect:SSLv2/v3 write client hello A SSL_connect:SSLv3 read server hello A depth=2 /DC=ch/DC=cern/CN=CERN Root CA verify return:1 depth=1 /DC=ch/DC=cern/CN=CERN Trusted Certification Authority verify return:1 depth=0 /DC=ch/DC=cern/OU=computers/CN=vtb-generic-40.cern.ch verify return:1 SSL_connect:SSLv3 read server certificate A SSL_connect:SSLv3 read server key exchange A SSL_connect:SSLv3 read server certificate request A SSL_connect:SSLv3 read server done A SSL_connect:SSLv3 write client certificate A SSL_connect:SSLv3 write client key exchange A SSL_connect:SSLv3 write certificate verify A SSL_connect:SSLv3 write change cipher spec A SSL_connect:SSLv3 write finished A SSL_connect:SSLv3 flush data SSL_connect:SSLv3 read finished A --- Certificate chain 0 s:/DC=ch/DC=cern/OU=computers/CN=vtb-generic-40.cern.ch i:/DC=ch/DC=cern/CN=CERN Trusted Certification Authority --- Server certificate -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIKG5pt1wACAAA4DTANBgkqhkiG9w0BAQUFADBZMRIwEAYK CZImiZPyLGQBGRYCY2gxFDASBgoJkiaJk/IsZAEZFgRjZXJuMS0wKwYDVQQDEyRD RVJOIFRydXN0ZWQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDkwMzI1MDk0 NTIwWhcNMTAwMzI1MDk0NTIwWjBfMRIwEAYKCZImiZPyLGQBGRYCY2gxFDASBgoJ kiaJk/IsZAEZFgRjZXJuMRIwEAYDVQQLEwljb21wdXRlcnMxHzAdBgNVBAMTFnZ0 Yi1nZW5lcmljLTQwLmNlcm4uY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDG4S+xoqRZwIIQtLwTWS23nTkhGpHklGWc46ptQqXXmGpM7B/Xf1+atQqq ZPpjenv7mZW5Oq0BLJHSSmyfvKOzDkvqTT1W1h4e31enLcbJum063whmOJE1mANZ xgMNE/ospI/Q6k/7hvaXFuynJO9At80BZ3UiaGeMBEbO57Z6h+hqyLN6jtziz4WG 1yfnu+GvOBrjD8SZCEDdpPGmZgRw+sNsRsFBQaqiJ7GY6j6V3CMOpBuE/ZnU8r7K cBR7oKNb1eagJdyut5VzqMwR7X0iBJ3k+fvWsONO1u/PfIOctmu7nATBDMIn7Tyv vF7i77nX0BH5x6v3MovtmbFg0wmrAgMBAAGjggNpMIIDZTAdBgNVHQ4EFgQUHpLR NPNN8oplwPwYEGJs6hEypV8wHwYDVR0jBBgwFoAUmMyS0EYwNoyw7ZgNclGpR0zd viEwggE0BgNVHR8EggErMIIBJzCCASOgggEfoIIBG4ZHaHR0cDovL2NhLmNlcm4u Y2gvY2EvY3JsL0NFUk4lMjBUcnVzdGVkJTIwQ2VydGlmaWNhdGlvbiUyMEF1dGhv cml0eS5jcmyGgc9sZGFwOi8vL0NOPUNFUk4lMjBUcnVzdGVkJTIwQ2VydGlmaWNh dGlvbiUyMEF1dGhvcml0eSxDTj1jZXJucGtpMDEsQ049Q0RQLENOPVB1YmxpYyUy MEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9 Y2VybixEQz1jaD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0 Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwggFEBggrBgEFBQcBAQSCATYwggEy MGgGCCsGAQUFBzAChlxodHRwOi8vY2EuY2Vybi5jaC9jYS9jcmwvY2VybnBraTAx LmNlcm4uY2hfQ0VSTiUyMFRydXN0ZWQlMjBDZXJ0aWZpY2F0aW9uJTIwQXV0aG9y aXR5KDIpLmNydDCBxQYIKwYBBQUHMAKGgbhsZGFwOi8vL0NOPUNFUk4lMjBUcnVz dGVkJTIwQ2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxDTj1BSUEsQ049UHVibGlj JTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixE Qz1jZXJuLERDPWNoP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0 aWZpY2F0aW9uQXV0aG9yaXR5MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWg MD0GCSsGAQQBgjcVBwQwMC4GJisGAQQBgjcVCIO90AmC7Y0Nhu2LK4He9TeFgNBi HobSzFCB2fNbAgFkAgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAn BgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMA0GCSqGSIb3 DQEBBQUAA4IBAQAHXOQhKqCSILA+yAGD8+MqHuvGIjMl4CRwGYMBrShTAyg9Osrv hFGmiCdzHik+D6EKSgGZFxFuSb6iGLFB7yC2OFplbaupeKTGuE1pgE0jgvZeccrV lbYymWpRnCuaL5Hfy63bQN1xLZ9FkzhdC747ZfEoxcwWlmCbFVpubKiVGR0X/khs CD8x2PyLVjo0dfFJiK028+DDYfTm8cLokPSs3oodx+/Plilbqbs1OXNvnHCRiw3O pioSkKiIm7H4lEcbK5dzdf/XtLpoDvu0GZTmfNXrC7+wMPpdXnr3c68OTkaq1I1y uC5/CQvT2ELVzRQrLVBdNzieg8SK02Gf0mjp -----END CERTIFICATE----- subject=/DC=ch/DC=cern/OU=computers/CN=vtb-generic-40.cern.ch issuer=/DC=ch/DC=cern/CN=CERN Trusted Certification Authority --- Acceptable client certificate CA names /C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein User CA Grid - G01 /C=MA/O=MaGrid/CN=MaGrid CA /DC=org/DC=DOEGrids/OU=Certificate Authorities/CN=DOEGrids CA 1 /DC=bg/DC=acad/CN=BG.ACAD CA /C=HU/O=KFKI RMKI CA/CN=KFKI RMKI CA /C=CA/O=Grid/CN=Grid Canada Certificate Authority /C=TR/O=TRGrid/CN=TR-Grid CA /DC=EDU/DC=UTEXAS/DC=TACC/O=UT-AUSTIN/CN=TACC Classic CA /DC=ch/DC=cern/CN=CERN Root CA /DC=cz/DC=cesnet-ca/CN=CESNET CA /DC=gov/DC=fnal/O=Fermilab/OU=Certificate Authorities/CN=Kerberized CA /C=JP/O=National Research Grid Initiative/OU=CGRD/CN=NAREGI CA /DC=org/DC=ugrid/CN=UGRID CA /C=CH/O=Switch - Teleinformatikdienste fuer Lehre und Forschung/CN=SWITCH Personal CA /C=FR/O=CNRS/CN=CNRS2-Projets /C=SG/O=Netrust Certificate Authority 1/OU=Netrust CA1 /C=PT/O=LIPCA/CN=LIP Certification Authority /DC=net/DC=ES/OU=Certificate Authorities/CN=NERSC Online CA /C=PK/O=NCP/CN=PK-GRID-CA /C=BE/O=BELNET/OU=BEGrid/CN=BEGrid CA/emailAddress=gridca@belnet.be /C=JP/O=AIST/OU=GRID/CN=Certificate Authority /C=CH/O=Switch - Teleinformatikdienste fuer Lehre und Forschung/CN=SWITCHslcs CA /C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root /C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006 /C=CL/O=REUNACA/CN=REUNA Certification Authority /C=FR/O=CNRS/CN=GRID2-FR /DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA /C=MK/O=MARGI/CN=MARGI-CA /DC=ch/DC=cern/CN=CERN Trusted Certification Authority /C=PL/O=GRID/CN=Polish Grid CA /C=MX/O=UNAMgrid/OU=UNAM/CN=CA /C=CY/O=CyGrid/O=HPCL/CN=CyGridCA /DC=org/DC=balticgrid/CN=Baltic Grid Certification Authority /DC=TW/DC=ORG/DC=NCHC/CN=NCHC CA /C=BE/OU=BEGRID/O=BELNET/CN=BEgrid CA /C=AM/O=ArmeSFo/CN=ArmeSFo CA /C=CH/O=SwissSign/CN=SwissSign CA (RSA IK May 6 1999 18:00:58)/emailAddress=ca@SwissSign.com /C=JP/O=KEK/OU=CRC/CN=KEK GRID Certificate Authority /DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority /DC=MD/DC=MD-Grid/O=RENAM/OU=Certification Authority/CN=MD-Grid CA /DC=NET/DC=PRAGMA-GRID/CN=PRAGMA-UCSD CA /C=FR/O=CNRS/CN=CNRS2 /C=RS/O=AEGIS/CN=AEGIS-CA /DC=CN/DC=Grid/DC=SDG/CN=Scientific Data Grid CA /C=SK/O=SlovakGrid/CN=SlovakGrid CA /DC=me/DC=ac/DC=MREN/CN=MREN-CA /C=CH/O=Switch - Teleinformatikdienste fuer Lehre und Forschung/CN=SWITCHgrid Root CA /DC=BR/DC=UFF/DC=IC/O=UFF LACGrid CA/CN=UFF Latin American and Caribbean Catch-all Grid CA /C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid Root CA 2006 /C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=MyProxy /C=CH/O=Switch - Teleinformatikdienste fuer Lehre und Forschung/CN=SWITCH Server CA /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA /O=Grid/O=NorduGrid/CN=NorduGrid Certification Authority /C=KR/O=KISTI/O=GRID/CN=KISTI Grid Certificate Authority /C=IT/O=INFN/CN=INFN CA /CN=SwissSign Bronze CA/emailAddress=bronze@swisssign.com/O=SwissSign/C=CH /C=SI/O=SiGNET/CN=SiGNET CA /DC=LV/DC=latgrid/CN=Certification Authority for Latvian Grid /DC=net/DC=ES/O=ESnet/OU=Certificate Authorities/CN=ESnet Root CA 1 /C=IE/O=Grid-Ireland/CN=Grid-Ireland Certification Authority /C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein Server CA Grid - G01 /DC=RO/DC=RomanianGRID/O=ROSA/OU=Certification Authority/CN=RomanianGRID CA /DC=es/DC=irisgrid/CN=IRISGridCA /C=FR/O=CNRS/CN=CNRS /C=IR/O=IPM/O=IRAN-GRID/CN=IRAN-GRID CA /C=HU/O=NIIF/OU=Certificate Authorities/CN=NIIF Root CA /C=DE/O=GermanGrid/CN=GridKa-CA /C=AR/O=e-Ciencia/OU=UNLP/L=CeSPI/CN=PKIGrid /C=AU/O=APACGrid/OU=CA/CN=APACGrid/emailAddress=camanager@vpac.org /C=AT/O=AustrianGrid/OU=Certification Authority/CN=Certificate Issuer /C=IL/O=IUCC/CN=IUCC/emailAddress=ca@mail.iucc.ac.il /C=TW/O=AS/CN=Academia Sinica Grid Computing Certification Authority Mercury /C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=CACL /DC=CN/DC=Grid/CN=Root Certificate Authority at CNIC /C=FR/O=CNRS/CN=CNRS-Projets /C=VE/O=Grid/O=Universidad de Los Andes/OU=CeCalCULA/CN=ULAGrid Certification Authority /C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA /C=HR/O=edu/OU=srce/CN=SRCE CA /C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein PCA Grid - G01 /DC=IN/DC=GARUDAINDIA/CN=Indian Grid Certification Authority /C=NL/O=NIKHEF/CN=NIKHEF medium-security certification auth /CN=SwissSign Silver CA/emailAddress=silver@swisssign.com/O=SwissSign/C=CH /C=CN/O=HEP/CN=gridca-cn/emailAddress=gridca@ihep.ac.cn /DC=ORG/DC=SEE-GRID/CN=SEE-GRID CA /DC=EDU/DC=UTEXAS/DC=TACC/O=UT-AUSTIN/CN=TACC Root CA /CN=SWITCH CA/emailAddress=switch.ca@switch.ch/O=Switch - Teleinformatikdienste fuer Lehre und Forschung/C=CH /C=TH/O=NECTEC/OU=GOC/CN=NECTEC GOC CA /C=FR/O=CNRS/CN=GRID-FR /C=BR/O=ICPEDU/O=UFF BrGrid CA/CN=UFF Brazilian Grid Certification Authority --- SSL handshake has read 10170 bytes and written 4800 bytes --- New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : DHE-RSA-AES256-SHA Session-ID: 4A5740E9CC09EB2B87099A1E40DAEFFC11111532C1674C3C353CA6D78726B86E Session-ID-ctx: Master-Key: 4D69DFB9CA0980465345ECF7BAA67397F8EFFC07412BC1EF687F338161EF7760315C15B70D623A2D0B494957CA707E28 Key-Arg : None Start Time: 1247232234 Timeout : 300 (sec) Verify return code: 0 (ok) --- CONNECT ^@ ERROR message:Unable to authenticate transport without SSL certificate. java.lang.SecurityException: Unable to authenticate transport without SSL certificate. at org.apache.activemq.security.JaasCertificateAuthenticationBroker.addConnection(JaasCertificateAuthenticationBroker.java:75) at org.apache.activemq.broker.MutableBrokerFilter.addConnection(MutableBrokerFilter.java:89) at org.apache.activemq.broker.TransportConnection.processAddConnection(TransportConnection.java:686) at org.apache.activemq.broker.jmx.ManagedTransportConnection.processAddConnection(ManagedTransportConnection.java:86) at org.apache.activemq.command.ConnectionInfo.visit(ConnectionInfo.java:134) at org.apache.activemq.broker.TransportConnection.service(TransportConnection.java:308) at org.apache.activemq.broker.TransportConnection$1.onCommand(TransportConnection.java:182) at org.apache.activemq.transport.TransportFilter.onCommand(TransportFilter.java:68) at org.apache.activemq.transport.InactivityMonitor.onCommand(InactivityMonitor.java:210) at org.apache.activemq.transport.stomp.StompTransportFilter.sendToActiveMQ(StompTransportFilter.java:78) at org.apache.activemq.transport.stomp.ProtocolConverter.sendToActiveMQ(ProtocolConverter.java:135) at org.apache.activemq.transport.stomp.ProtocolConverter.onStompConnect(ProtocolConverter.java:491) at org.apache.activemq.transport.stomp.ProtocolConverter.onStompCommand(ProtocolConverter.java:187) at org.apache.activemq.transport.stomp.StompTransportFilter.onCommand(StompTransportFilter.java:67) at org.apache.activemq.transport.TransportSupport.doConsume(TransportSupport.java:84) at org.apache.activemq.transport.tcp.SslTransport.doConsume(SslTransport.java:104) at org.apache.activemq.transport.tcp.TcpTransport.doRun(TcpTransport.java:203) at org.apache.activemq.transport.tcp.TcpTransport.run(TcpTransport.java:185) at java.lang.Thread.run(Thread.java:636) SSL3 alert read:warning:close notify closed SSL3 alert write:warning:close notify