SSL configuration can be quite tricky to get right, and in some cases can completely lockout the clients. Attached document describes the end to end SSL configuration on Broker Server and clients. It also includes a section on how to recover if locked out of Broker due to SSL misconfiguration.
Attachments also include sample SSL certificates. Password for keystores is "active".
SSLConfigurationonBrokerServerandClients.pdf (958 KB)
webmCA.jks (972 Bytes)
webmCA.pem (4.31 KB)
brokerclient1.p12 (3.51 KB)
brokerclient2.p12 (3.51 KB)
brokerserver.p12 (3.51 KB)
brokerserver.pem (10.5 KB)