Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docs: Clarify how to use amqps connections #253

Open
davemaul opened this issue Jul 15, 2021 · 1 comment · May be fixed by #577
Open

Docs: Clarify how to use amqps connections #253

davemaul opened this issue Jul 15, 2021 · 1 comment · May be fixed by #577

Comments

@davemaul
Copy link

davemaul commented Jul 15, 2021

Hello there,

i had a headache trying to create an SSL connection for RabbitMQ. Correct me if I'm wrong, but I think the smoothest way to achieve this is by using rabbitmq.uri: amqps://rabbitmq:5671 instead of a combination of rabbitmq.host: rabbitmq and rabbitmq.port: 5671 because in the latter case SSL will be disabled. Furthermore, there's no property to explicitely activate SSL. Spring offers something like that:

spring.rabbitmq.ssl.enabled: true
spring.rabbitmq.ssl.validate-server-certificate: true
spring.rabbitmq.ssl.verify-hostname: true

I only found out how to configure SSL by looking into com.rabbitmq.client.ConnectionFactory:

image

In the docs there's nothing explicit about SSL connections. Imo this would be very useful especially for production usage.

Thanks in advance!

@jmongard
Copy link

jmongard commented Oct 24, 2023

I am also wondering how to set this up. The setUri approach is not good as it uses useSslProtocol() which is not suitable for production

Convenience method for configuring TLS using the default set of TLS protocols and a trusting TrustManager. This setup is only suitable for development and QA environments. The trust manager will trust every server certificate presented to it, this is convenient for local development but not recommended to use in production as it provides no protection against man-in-the-middle attacks. Prefer useSslProtocol(SSLContext).

@sdelamo sdelamo removed this from 4.3.0 Release Jan 26, 2024
@wetted wetted linked a pull request Jan 30, 2024 that will close this issue
@wetted wetted moved this to In Progress in 4.4.0 Release Jan 31, 2024
@wetted wetted moved this from In Progress to Todo in 4.4.0 Release Feb 29, 2024
@wetted wetted moved this from Todo to In Progress in 4.4.0 Release Apr 2, 2024
@wetted wetted removed this from 4.4.0 Release Apr 3, 2024
@wetted wetted moved this to Todo in 4.5.0 Release Apr 3, 2024
@wetted wetted moved this from Todo to In Progress in 4.5.0 Release Apr 16, 2024
@graemerocher graemerocher removed the status in 4.5.0 Release May 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Status: No status
Development

Successfully merging a pull request may close this issue.

4 participants