Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Fix paths to certs

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2018-08-02 20:44:40 +00:00
parent c6a33bd8fb
commit 34d54c4be7
2 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/rabbitmq_cluster/templates/rabbitmq-env.conf
View file

@ -2,10 +2,10 @@ ERL_SSL_PATH="/usr/lib64/erlang/lib/ssl-7.3.3.2/ebin"
SERVER_ADDITIONAL_ERL_ARGS="-pa $ERL_SSL_PATH \
-proto_dist inet_tls \
-ssl_dist_opt server_certfile /etc/rabbitmq/node.combined.pem \
-ssl_dist_opt server_certfile /etc/rabbitmq/nodecert.combined.pem \
-ssl_dist_opt server_secure_renegotiate true client_secure_renegotiate true"
CTL_ERL_ARGS="-pa $ERL_SSL_PATH \
-proto_dist inet_tls \
-ssl_dist_opt server_certfile /etc/rabbitmq/node.combined.pem \
-ssl_dist_opt server_certfile /etc/rabbitmq/nodecert.combined.pem \
-ssl_dist_opt server_secure_renegotiate true client_secure_renegotiate true"

8
roles/rabbitmq_cluster/templates/rabbitmq.config
View file

@ -6,8 +6,8 @@
%% Here goes TLS
{ssl_listeners, [5671]},
{ssl_options, [{cacertfile, "/etc/rabbitmq/ca.crt"},
{certfile, "/etc/rabbitmq/node.crt"},
{keyfile, "/etc/rabbitmq/node.key"},
{certfile, "/etc/rabbitmq/nodecert/node.crt"},
{keyfile, "/etc/rabbitmq/nodecert/node.key"},
{verify, verify_peer},
{fail_if_no_peer_cert, true}]},
{auth_mechanisms, ['EXTERNAL']},
@ -32,8 +32,8 @@
{listener, [{port, 15672},
{ssl, true},
{ssl_opts, [{cacertfile, "/etc/rabbitmq/ca.crt"},
{certfile, "/etc/rabbitmq/node.crt"},
{keyfile, "/etc/rabbitmq/node.key"}]}]},
{certfile, "/etc/rabbitmq/nodecert/node.crt"},
{keyfile, "/etc/rabbitmq/nodecert/node.key"}]}]},
]},
{rabbitmq_management_agent,