n8n-nodes-amqp-ssl

Advanced AMQP 1.0 nodes for n8n with enterprise-grade SSL/TLS support, certificate authentication, and automatic stunnel integration for Cegid Cloud compatibility.

🚀 Features

• Complete AMQP 1.0 support using the rhea library
• Advanced SSL/TLS configuration with certificate validation
• SASL ANONYMOUS authentication for Cegid Cloud compatibility
• External stunnel proxy support for SSL/TLS termination
• SNI (Server Name Indication) support
• Robust error handling with detailed diagnostics
• Two specialized nodes:
  • AMQP Node: Send messages to AMQP brokers
  • AMQP Trigger: Listen for incoming AMQP messages

🔐 Security Features

• Client certificate authentication
• CA certificate validation
• Private key encryption support
• Configurable certificate validation
• TLS version control (1.0 to 1.3)
• SSL debugging mode for troubleshooting

📦 Installation

Via n8n Community Nodes (Recommended)

1. Go to Settings → Community Nodes in your n8n instance
2. Click Install a community node
3. Enter: n8n-nodes-amqp-ssl
4. Click Install
5. Restart n8n if required

Via npm (for self-hosted n8n)

# Navigate to your n8n installation directory
cd ~/.n8n

# Install the package
npm install n8n-nodes-amqp-ssl

# Restart n8n

🔧 Configuration

Basic TCP Connection

• Hostname: Your AMQP broker hostname
• Port: AMQP port (default: 5672)
• Username/Password: Authentication credentials
• Transport Type: tcp

SSL/TLS Connection

• Hostname: Your AMQP broker hostname
• Port: AMQPS port (default: 5671)
• Transport Type: tls
• CA Certificate: Certificate Authority certificate (PEM format)
• Client Certificate: Your client certificate (PEM format)
• Private Key: Your private key (PEM format)
• Passphrase: Private key passphrase (if encrypted)

Advanced SSL Options

• Certificate Authentication: Use certificate-only auth (no username/password)
• Reject Unauthorized: Validate server certificates
• Server Name (SNI): Custom server name for SNI
• SSL Debug Mode: Enable detailed SSL debugging
• Minimum TLS Version: Set minimum TLS version (1.0-1.3)

🎯 Usage Examples

Sending Messages

Use the AMQP Node to send messages to queues or topics:

• Configure your broker connection
• Set the destination (queue/topic name)
• Add your message content
• Configure message properties as needed

Receiving Messages

Use the AMQP Trigger to listen for incoming messages:

• Configure your broker connection
• Set the source (queue/topic name)
• Configure subscription options
• Process incoming messages in your workflow

🔒 Cegid Cloud Integration

SASL ANONYMOUS Support

This package automatically detects Cegid Cloud servers and uses SASL ANONYMOUS authentication to resolve compatibility issues:

• Auto-detection: Recognizes *.cegid.cloud hostnames
• SASL ANONYMOUS: Uses rhea's official SASL API
• External stunnel: Works with separately deployed stunnel proxy

Setup for Cegid Cloud

1. Deploy stunnel using the provided stunnel-solution/ configuration
2. Configure n8n to connect to your stunnel server (TCP port 5672)
3. Use TCP transport - stunnel handles SSL/TLS externally
4. Connect successfully - SASL ANONYMOUS authentication works seamlessly!

🛠️ SSL Troubleshooting

If you encounter SSL certificate errors, check the stunnel-solution/ directory for detailed setup guides.

Common issues:

• Bad certificate error: Verify certificate validity and server trust
• Certificate verification failed: Check CA certificate configuration
• Connection timeout: Verify hostname, port, and network connectivity
• Cegid Cloud SSL errors: Deploy external stunnel proxy and use TCP transport

🧪 Testing

The package includes comprehensive tests for SSL/TLS functionality:

npm test

📚 Documentation

• IMPROVEMENTS.md - Detailed technical improvements
• stunnel-solution/ - Complete stunnel setup guide for Cegid Cloud
• CHANGELOG.md - Version history and changes

🤝 Contributing

1. Fork the repository
2. Create your feature branch
3. Commit your changes
4. Push to the branch
5. Create a Pull Request

📄 License

MIT License - see LICENSE.md for details

🆘 Support

For issues and questions:

1. Check the troubleshooting guides
2. Enable SSL debug mode for detailed logs
3. Open an issue on GitHub with detailed error information

🏆 Credits

Built with enterprise-grade security and reliability in mind. Features advanced SSL/TLS implementation with comprehensive certificate validation and debugging capabilities.