Use just the common name from client certs

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-17 14:19:33 +00:00 · 2018-08-17 14:19:33 +00:00 · 29c479c291
commit 29c479c291
parent 7f1ef59465
1 changed files with 1 additions and 0 deletions
--- a/roles/rabbitmq_cluster/templates/rabbitmq.config
+++ b/roles/rabbitmq_cluster/templates/rabbitmq.config
@ -3,6 +3,7 @@
  [
   %% We do not want plain TCP, only TLS
   {tcp_listeners, []},
+   {ssl_cert_login_from, common_name},
   %% Here goes TLS
   {ssl_listeners, [5671]},
   {ssl_options, [{cacertfile,  "/etc/rabbitmq/ca.crt"},