Fail connect to AmazonMQ using Symfony messenger-CodePudding

The

Prefer the one from the "root" tab, which is usually valid way longer ( 10 years).

Source:

https://github.com/symfony/amqp-messenger/blob/5.4/Transport/Connection.php#L232

https://github.com/symfony/amqp-messenger/blob/4175a0a98507e7ec575dca9b36e6c0a5a072d3fd/Transport/Connection.php#L285

CodePudding user response：

@Musa thanks for the answer! I will provide more details for somebody like me who never setup this certificate:

If you need work with Amazon MQ you should download the root certificate for mq.eu-central-1.amazonaws.com in pem format (see the answer from @Musa on how to do it).

Then you should change MESSENGER_TRANSPORT_DSN in .env file to add the new parameter cacert (see Symfony doc for more details https://symfony.com/doc/current/messenger.html#amqp-transport):

MESSENGER_TRANSPORT_DSN=amqps://username:[email protected]:5671///_messages?cacert=/path-to-root-cert/mq-eu-central-1-amazonaws-com.pem

Another possible solution is to specify Amazon Root CA 1. Every Linux distribution has this certificate (see package ca-certificates). In this case, MESSENGER_TRANSPORT_DSN must be like this:

MESSENGER_TRANSPORT_DSN=amqps://username:[email protected]:5671///_messages?cacert=/etc/ssl/certs/Amazon_Root_CA_1.pem