[rabbitmq-discuss] 3.3.4, web_stomp and ssl

[Robert Wysocki]

Dnia 2014-06-25, śro o godzinie 14:44 +0400, Michael Klishin pisze:
> On 25 June 2014 at 14:43:23, Robert Wysocki (robert.wysocki at unity.pl) wrote:
> > > I'm having an issue which was discussed here before, but there  
> > was no
> > conclusive answer yet.
> > The problem is that after configuring ssl for web_stomp plugin  
> > in a
> > proper manner rabbitmq says in logs that it's listening on the  
> > configured port but actually isn't listening. It listens though  
> > on
> > non-ssl port.
> >  
> > Had this issue before with 3.3.0, just upgraded to 3.3.4 and it's  
> > still
> > the same.
> >  
> > Any suggestions?
> 
> Please post your config file. 

[
 {rabbit,
  [%%
   {tcp_listeners, [5672]},
   {reverse_dns_lookups, false},
   {auth_mechanisms, ['PLAIN', 'AMQPLAIN']},
   {default_vhost,       <<"/">>},
   {default_user,        <<"guest">>},
   {default_pass,        <<"guest">>},
   {default_permissions, [<<".*">>, <<".*">>, <<".*">>]},
   {default_user_tags, [administrator]},
   {loopback_users, []}
  ]},
 {kernel,
  [%% Sets the net_kernel tick time.
  ]},
 {rabbitmq_management,
  [%% Pre-Load schema definitions from the following JSON file. See
   {listener, [{port,     55672},
               {ip,       "ipaddr"},
               {ssl,      false}
                            ]}
  ]},
 {rabbitmq_management_agent,
  [%% Misc/Advanced Options
  ]},
 {rabbitmq_shovel,
  [{shovels,
    [%% A named shovel worker.
    ]}
  ]},
 {rabbitmq_stomp,
  [%% Network Configuration - the format is generally the same as for the broker
   {tcp_listeners, [{"ipaddr", 61613}
                    ]},
   {default_user, [{login,    "login"},
                   {passcode, "pass"}]}
  ]},
 {rabbitmq_mqtt,
  [%% Set the default user name and password. Will be used as the default login
  ]},
 {rabbitmq_amqp1_0,
  [%% Connections that are not authenticated with SASL will connect as this
  ]},
 {rabbitmq_auth_backend_ldap,
  [%%
  ]},
  {rabbitmq_web_stomp,
      [{ssl_config, [{port,       15671},
                     {backlog,    1024},
                     {certfile,   "/etc/ssl/certs/hostname.pl.pem"},
                     {keyfile,    "/etc/ssl/private/hostname.pl.key"},
                     {cacertfile, "/etc/ssl/certs/cacert.pem"}
                    ]
      }]
  }
].

-- 
Robert M. Wysocki
administrator systemów linuksowych, administrator baz danych
Grupa Unity | ul. Przedmiejska 6-10, 54-201 Wrocław
ul. Conrada 55B, 31-357 Kraków | ul. Złota 59, 00-120 Warszawa