Hello, i can change the parameter in this way is not a problem.
We use for every other web-application in our cluster in the internal network SSL/TLS so we don't see why i must do it for the rabbitmq managment in a different way only because the puppet module can not handle this configuration case. For this reason we create our own fork and branch to fix it. And sometime i am really old in the mind... i don't like to spend energy to handshake, encrypt and decrypt if there is not necessary. Ciao Michele Am Samstag, 18. April 2015 11:47:05 UTC+2 schrieb Neil: > > Hello > > My 5 cents.... > > I'd prefer the parameter to be management_ssl and the default to be true > to maintain current behaviour > > Why not use SSL (well tls) between load bal and rabbitmq > > Thanks > > Neil > On 17 Apr 2015 19:11, "Michele Catalano" <[email protected] <javascript:>> > wrote: > >> Hi, >> >> we current use the rabbitmq module in a production environment and for >> our use case we need to disable explicit the ssl port for the management >> console but enable it for the RabbitMQ self. >> This is needed because the web interfaces are using one SSL certificate >> that will only installed on the Nginx running on the load balancers. So the >> management interface don't know this SSL cert and it is also a different >> one than the cert that is used for the RabbitMQ self. >> >> This is with the config file not really a problem but over the rabbitMQ >> puppet module not possible. >> To solve this problem i add in a fork the new parameter no_ssl_management >> to disable the ssl only for management interface. >> >> to give all the other user from the rabbitmq puppet module i wan't to >> setup a issue and a pull request with this new feature. >> >> Some opposition against this feature? >> >> Ciao >> Michele >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/puppet-users/22914846-9859-4fa2-a361-eee40660a8c3%40googlegroups.com >> >> <https://groups.google.com/d/msgid/puppet-users/22914846-9859-4fa2-a361-eee40660a8c3%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/c34d3f3a-48d0-4bc3-859d-9e1604b089a6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
