[rabbitmq-discuss] rabbitmq.config - ssl & management plugin

Wed Aug 8 21:45:09 BST 2012

Matthias Radestock <matthias at ...> writes:

> 
> On 07/08/12 20:01, DT wrote:
> > Has anyone configured the ssl access for management plugin?
> >
> > This is what I have in the rabbitmq.config file to access plugin 
management with
> > SSL.
> 
> You are missing...
> 
> 1) a '[' here
> 
> > {rabbit, [
> >   {ssl_listeners, [5671]},
> >   {ssl_options, [{cacertfile,"c:/testca/cacert.pem"},
> >   {certfile,"c:/server/cert.pem"},
> >   {keyfile,"C:/server/key.pem"},
> >   {verify,verify_peer},
> >   {fail_if_no_peer_cert,false}]}
> >   ]}
> 
> 2) a trailing ',' here
> 
> >   {rabbitmq_mochiweb,
> >   [{listeners, [{'*', [{port, 55670}]},
> >   {mgmt, [{port, 55672},
> >   {ssl, true},
> >   {ssl_opts, [{cacertfile, "c:/testca/cacert.pem"},
> >   {certfile, "C:/server/cert.pem"},
> >   {keyfile, "C:/server/key.pem"}]}
> >              ]}
> >         ]}
> >   ]}
> >   ].
> 
> Matthias.
> 
> 

Thanks for responding.  

Actually this is what I have in the rabbitmq.config.  I get an unexpected error
when executing 'rabbitmq-service start'

C:\Program Files\erl5.9.1\erts-5.9.1\bin\erlsrv: Failed to start service 
RabbitMQ.
Error: The process terminated unexpectedly.

[
  {rabbit, [
     {ssl_listeners, [5671]},
     {ssl_options, [{cacertfile,"c:/testca/cacert.pem"},
                    {certfile,  "c:/server/cert.pem"},
                    {keyfile,   "c:/server/key.pem"},
                    {verify,verify_peer},
                    {fail_if_no_peer_cert,false}]}
   ]}
   {rabbitmq_mochiweb,  [
       {listeners, [{'*', [{port, 55670}]},
         {mgmt, [{port, 55672},
            {ssl,      true},
            {ssl_opts, [{cacertfile, "c:/testca/cacert.pem"},
                        {certfile,   "c:/server/cert.pem"},
                        {keyfile,    "c:/server/key.pem"}]}
                       ]}
               ]}
   ]}
].

DT.