ActiveMQ and client authentication with certificate authentication

Question

Is there any way to determine the identity of the sender of the message in ActiveMQ (JMS in general), which is successfully connected to the broker via SSL using a client certificate?

I plan to use JM to communicate between the remote terminal and the perimeter server on my network simply because of the extensive work that was done internally to support JMS on the internal network. The terminal application uses the client certificate for authentication with the ActiveMS JMS broker, however, I am trying to find out if there is a way to determine the certificate used by the remote terminal to connect to the JMS on the perimeter server in order to transfer this information to the authentication service.

Any thoughts or ideas are greatly appreciated.

Answer 1

I decided that I asked this question about a year ago, and since then I have been able to successfully capture the SSL connection user.

The answer is quite simple, add populateJMSXUserID="true"to the broker definition.

If you need help setting up SSL client authentication, I found the Fuse Source to actually make some of the most well-designed and detailed ActiveMQ documents (Fuse Message Broker). You can find more information about the JAAS Certificate Authentication Plug-In here.