[rabbitmq-discuss] Cryptographic algorithms used by RabbitMQ SSL

Wed Sep 11 22:23:24 BST 2013

Hi,

I am trying to find out the list of crypto algorithms supported by SSL in
RabbitMQ. Documentation at http://www.rabbitmq.com/ssl.html says RabbitMQ
uses new_ssl erlang application. But, when I say 'rabbitmqctl status' on a
server where RabbitMQ 3.1.5 is installed, the list of applications doesn't
include new_ssl:

{running_applications,

     [{rabbitmq_management,"RabbitMQ Management Console","3.1.5"},

      {rabbitmq_management_agent,"RabbitMQ Management Agent","3.1.5"},

      {rabbit,"RabbitMQ","3.1.5"},

      {ssl,"Erlang/OTP SSL application","5.1.2"},

      {public_key,"Public key infrastructure","0.17"},

      {crypto,"CRYPTO version 2","2.2"},

      {asn1,"The Erlang ASN1 compiler version 1.8","1.8"},

      {os_mon,"CPO  CXC 138 46","2.2.10"},

      {rabbitmq_web_dispatch,"RabbitMQ Web Dispatcher","3.1.5"},

      {webmachine,"webmachine","1.10.3-rmq3.1.5-gite9359c7"},

      {mochiweb,"MochiMedia Web Server","2.7.0-rmq3.1.5-git680dba8"},

      {xmerl,"XML parser","1.3.2"},

      {inets,"INETS  CXC 138 49","5.9.2"},

      {mnesia,"MNESIA  CXC 138 12","4.7.1"},

      {amqp_client,"RabbitMQ AMQP Client","0.0.0"},

      {sasl,"SASL  CXC 138 11","2.2.1"},

      {stdlib,"ERTS  CXC 138 10","1.18.3"},

      {kernel,"ERTS  CXC 138 10","2.15.3"}]},

{os,{unix,linux}},

{erlang_version,

     "Erlang R15B03 (erts-5.9.3.1) [source] [smp:4:4] [async-threads:30]
[hipe] [kernel-poll:true]\n"}..

On the same server, I did the following:

[root at host]# erl

Erlang R15B03 (erts-5.9.3.1) [source] [smp:4:4] [async-threads:0] [hipe]
[kernel-poll:false]

Eshell V5.9.3.1  (abort with ^G)

2> ssl:start().

ok

3> ssl:cipher_suites().

[{dhe_rsa,aes_256_cbc,sha},

{dhe_dss,aes_256_cbc,sha},

{rsa,aes_256_cbc,sha},

{dhe_rsa,'3des_ede_cbc',sha},

{dhe_dss,'3des_ede_cbc',sha},

{rsa,'3des_ede_cbc',sha},

{dhe_rsa,aes_128_cbc,sha},

{dhe_dss,aes_128_cbc,sha},

{rsa,aes_128_cbc,sha},

{rsa,rc4_128,sha},

{rsa,rc4_128,md5},

{dhe_rsa,des_cbc,sha},

{rsa,des_cbc,sha}]

5> ssl:versions().

[{ssl_app,"5.1.2"},

{supported,[tlsv1,sslv3]},

{available,['tlsv1.2','tlsv1.1',tlsv1,sslv3]}]

Is #3 above the right way to find the list of algorithms supported by
RabbitMQ? If not, can you please suggest the right way/listing?

Thanks

Kapil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20130911/590cee12/attachment.htm>