<div dir="ltr">Default functionality of SSL rabbitmq doesnt validate if client certificate is already revoked or not.<div><br></div><div>I need to enable this functionality. How should we do this? Some other forums i came to know that we need write an erlang module to do it.</div>
<div><br></div><div><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">To hook your verification function into rabbit (nb: this is untested) ...</p>
<p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">1) write an erlang module containing (and exporting) that function</p><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">
2) In the rabbit/ssl_options section of the rabbitmq.config, add an <br>entry {verify_fun, {YourModuleName, YourFunctionName}}.</p><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">
<br></p><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">I have absolutely no idea on erlang , can somebody share a piece of sample code/steps to do it? Or is there any way to implement CRL functionality.</p>
<p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif"><br></p><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">
<br></p><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">Thanks in advance.</p><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">
<br></p><p style="margin:1em 0px;padding:0px;border:0px;vertical-align:baseline;font-size:13px;font-family:Arial,Helvetica,sans-serif">-Anand</p></div></div>