Short additinonal info. Here is our branch with the change: https://github.com/mayflower/puppetlabs-rabbitmq/tree/disable_explicit_ssl_for_management
Am Sonntag, 19. April 2015 11:00:38 UTC+2 schrieb Michele Catalano: > > Hello, > > i can change the parameter in this way is not a problem. > > We use for every other web-application in our cluster in the internal > network SSL/TLS so we don't see why i must do it for the rabbitmq managment > in a different way only because the puppet module can not handle this > configuration case. For this reason we create our own fork and branch to > fix it. > And sometime i am really old in the mind... i don't like to spend energy > to handshake, encrypt and decrypt if there is not necessary. > > Ciao > > Michele > > Am Samstag, 18. April 2015 11:47:05 UTC+2 schrieb Neil: >> >> Hello >> >> My 5 cents.... >> >> I'd prefer the parameter to be management_ssl and the default to be true >> to maintain current behaviour >> >> Why not use SSL (well tls) between load bal and rabbitmq >> >> Thanks >> >> Neil >> On 17 Apr 2015 19:11, "Michele Catalano" <[email protected]> wrote: >> >>> Hi, >>> >>> we current use the rabbitmq module in a production environment and for >>> our use case we need to disable explicit the ssl port for the management >>> console but enable it for the RabbitMQ self. >>> This is needed because the web interfaces are using one SSL certificate >>> that will only installed on the Nginx running on the load balancers. So the >>> management interface don't know this SSL cert and it is also a different >>> one than the cert that is used for the RabbitMQ self. >>> >>> This is with the config file not really a problem but over the rabbitMQ >>> puppet module not possible. >>> To solve this problem i add in a fork the new parameter >>> no_ssl_management to disable the ssl only for management interface. >>> >>> to give all the other user from the rabbitmq puppet module i wan't to >>> setup a issue and a pull request with this new feature. >>> >>> Some opposition against this feature? >>> >>> Ciao >>> Michele >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Puppet Users" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/puppet-users/22914846-9859-4fa2-a361-eee40660a8c3%40googlegroups.com >>> >>> <https://groups.google.com/d/msgid/puppet-users/22914846-9859-4fa2-a361-eee40660a8c3%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> For more options, visit https://groups.google.com/d/optout. >>> >> -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/3448a190-a3c9-4904-87c8-4fd48f40a7c3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
