Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Issue with RabbitMQ 3.8.5, trust store, and TLS authentication #2405

Closed
lukebakken opened this issue Jul 8, 2020 · 0 comments · Fixed by #2406
Closed

Issue with RabbitMQ 3.8.5, trust store, and TLS authentication #2405

lukebakken opened this issue Jul 8, 2020 · 0 comments · Fixed by #2406
Assignees
@lukebakken
Labels
bug effort-medium
Milestone
3.8.6

Comments

@lukebakken
Copy link
Collaborator

lukebakken commented Jul 8, 2020 •
edited by michaelklishin
Loading

Repo with artifacts - https://github.com/lukebakken/tls-auth-cert-store-GHeD-CRU5lk

Reported via this rabbitmq-users discussion

To reproduce using 3.8.5:

  • Enable the rabbitmq_trust_store and rabbitmq_auth_mechanism_ssl plugins.
  • Start RabbitMQ using this configuration file. Note that the trust store is configured, but no cacertfile is set.
  • The ranch listener will not start correctly:
2020-07-08 16:15:32.686 [error] <0.694.0> Failed to start Ranch listener {acceptor,{0,0,0,0,0,0,0,0},5671} in ranch_ssl:listen([{cacerts,'...'},{key,'...'},{cert,'...'},{ip,{0,0,0,0,0,0,0,0}},{port,5671},inet6,{backlog,128},{nodelay,true},{linger,{true,0}},{exit_on_close,false},{versions,['tlsv1.2','tlsv1.1',tlsv1]},{keyfile,"/home/lbakken/issues/rabbitmq-users/tls-auth-cert-store-GHeD-CRU5lk/certs/server_key.pem"},{certfile,"/home/lbakken/issues/rabbitmq-users/tls-auth-cert-store-GHeD-CRU5lk/certs/server_certificate.pem"},{fail_if_no_peer_cert,true},{verify,verify_peer}]) for reason {options,{cacertfile,[]}} (unknown POSIX error)
@lukebakken lukebakken self-assigned this Jul 8, 2020
@lukebakken lukebakken transferred this issue from rabbitmq/rabbitmq-trust-store Jul 9, 2020
lukebakken added a commit that referenced this issue Jul 9, 2020
@lukebakken
Move networking boot step to end of startup
25e0760 
This allows plugins to configure network listener settings and have
those settings apply to all listeners when started.

Fixes #2405
@lukebakken lukebakken mentioned this issue Jul 9, 2020
Merged
@lukebakken lukebakken added this to the 3.8.6 milestone Jul 9, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@lukebakken lukebakken

Labels
bug effort-medium
Projects
None yet
Milestone
3.8.6
Development

Successfully merging a pull request may close this issue.

Move networking boot step to end of startup rabbitmq/rabbitmq-server
2 participants
@michaelklishin @lukebakken