rabbitmqctl encode accepts plain text values

[ohye3166]

ps -ef | grep rabbitmq will show Plaintext password when using rabbitmqctl encode function which is unsafe, so if there support Interactive way to input password?

[michaelklishin]

I will convert this issue to a GitHub discussion. Currently GitHub will automatically close and lock the issue even though your question will be transferred and responded to elsewhere. This is to let you know that we do not intend to ignore this but this is how the current GitHub conversion mechanism makes it seem for the users :(

[michaelklishin]

CLI commands that operate on passwords do accept them via standard input. rabbitmqctl encode does not.

It is not meant to be used on production nodes. Used it to encode a value and use whatever configuration generation tooling you use
to deploy it.

[michaelklishin]

Curiously, both the passphrase and the value encrypted can in practice be considered sensitive. So which one should be accepted via standard input? Or both? I wonder if it would have any unintended consequences. Doing that for the passphrase would be trivial, as it is something that change_password already does. We don't have any examples of commands that accept all positional arguments via standard input.

[michaelklishin]

See #4258.