Skip to content

Authorisation failures due to incorrect vhost specified on TLS connections could use better error message #274

@michaelklishin

Description

@michaelklishin

Not sure if we can control this as this may be how Ruby's OpenSSL extension does TLS upgrade, but still.

A user reported that connecting with TLS and incorrectly specific vhost results in

{handshake_error,opening,0,
                {amqp_error,access_refused,
                            "access to vhost '/' refused for user 'upgrade-admin'",
                            'connection.open'}}

RabbitMQ log and

OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol

from Bunny. We should look into making the message clearer.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions