I'm a student and now 2nd time poster, please excuse any lacking detail on my part.
For my exams I'm doing a cross-platorm application using RabbitMQ for messaging. It'll serve as POC for both SOA and Security. The application purpose is a mocked shopping system, with a component for each action e.g. ordering, payment, shipping. The purpose is secondary, but they all communicate through a RabbitMQ-broker.
My questions are:
How to go about encrypting and handling key pairs in such a system?
What major components are involved?
What is the major concerns/pitfalls related to enterprise scale encryption?
I'm familiar with encryption and terminology, but not at scale.
My goal is to be able to have clients on web and mobile communicating securely with the broker, while maintaining internal confidentiality. Preferably using as few platform specific libraries as possible.
FOSS is preferred, and any pointer or advised literature has interest.