{"action":"created","issue":{"url":"https://api.github.com/repos/rabbitmq/rabbitmq-website/issues/316","repository_url":"https://api.github.com/repos/rabbitmq/rabbitmq-website","labels_url":"https://api.github.com/repos/rabbitmq/rabbitmq-website/issues/316/labels{/name}","comments_url":"https://api.github.com/repos/rabbitmq/rabbitmq-website/issues/316/comments","events_url":"https://api.github.com/repos/rabbitmq/rabbitmq-website/issues/316/events","html_url":"https://github.com/rabbitmq/rabbitmq-website/pull/316","id":196593701,"number":316,"title":"Remove openssl from ssl:cipher_suites() command","user":{"login":"davewongillies","id":69970,"avatar_url":"https://avatars.githubusercontent.com/u/69970?v=3","gravatar_id":"","url":"https://api.github.com/users/davewongillies","html_url":"https://github.com/davewongillies","followers_url":"https://api.github.com/users/davewongillies/followers","following_url":"https://api.github.com/users/davewongillies/following{/other_user}","gists_url":"https://api.github.com/users/davewongillies/gists{/gist_id}","starred_url":"https://api.github.com/users/davewongillies/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davewongillies/subscriptions","organizations_url":"https://api.github.com/users/davewongillies/orgs","repos_url":"https://api.github.com/users/davewongillies/repos","events_url":"https://api.github.com/users/davewongillies/events{/privacy}","received_events_url":"https://api.github.com/users/davewongillies/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-12-20T06:07:00Z","updated_at":"2016-12-20T08:49:42Z","closed_at":"2016-12-20T08:39:08Z","pull_request":{"url":"https://api.github.com/repos/rabbitmq/rabbitmq-website/pulls/316","html_url":"https://github.com/rabbitmq/rabbitmq-website/pull/316","diff_url":"https://github.com/rabbitmq/rabbitmq-website/pull/316.diff","patch_url":"https://github.com/rabbitmq/rabbitmq-website/pull/316.patch"},"body":"What\r\n====\r\nRemove `openssl` from the command `rabbitmqctl eval 'ssl:cipher_suites().'` when listing out cipher suites supported\r\n\r\nWhy\r\n===\r\n\r\nWhen listing the cipher suites with `rabbitmqctl eval 'ssl:cipher_suites(openssl).'` it outputs the list in OpenSSL format:\r\n\r\n```\r\n# rabbitmqctl eval 'ssl:cipher_suites(openssl).'\r\n[\"ECDHE-ECDSA-AES256-GCM-SHA384\",\"ECDHE-RSA-AES256-GCM-SHA384\",\r\n \"ECDHE-ECDSA-AES256-SHA384\",\"ECDHE-RSA-AES256-SHA384\",\r\n \"ECDH-ECDSA-AES256-GCM-SHA384\",\"ECDH-RSA-AES256-GCM-SHA384\",\r\n \"ECDH-ECDSA-AES256-SHA384\",\"ECDH-RSA-AES256-SHA384\",\r\n \"DHE-RSA-AES256-GCM-SHA384\",\"DHE-DSS-AES256-GCM-SHA384\",\r\n \"DHE-RSA-AES256-SHA256\",\"DHE-DSS-AES256-SHA256\",\"AES256-GCM-SHA384\",\r\n \"AES256-SHA256\",\"ECDHE-ECDSA-AES128-GCM-SHA256\",\r\n \"ECDHE-RSA-AES128-GCM-SHA256\",\"ECDHE-ECDSA-AES128-SHA256\",\r\n \"ECDHE-RSA-AES128-SHA256\",\"ECDH-ECDSA-AES128-GCM-SHA256\",\r\n \"ECDH-RSA-AES128-GCM-SHA256\",\"ECDH-ECDSA-AES128-SHA256\",\r\n \"ECDH-RSA-AES128-SHA256\",\"DHE-RSA-AES128-GCM-SHA256\",\r\n \"DHE-DSS-AES128-GCM-SHA256\",\"DHE-RSA-AES128-SHA256\",\"DHE-DSS-AES128-SHA256\",\r\n \"AES128-GCM-SHA256\",\"AES128-SHA256\",\"ECDHE-ECDSA-AES256-SHA\",\r\n \"ECDHE-RSA-AES256-SHA\",\"DHE-RSA-AES256-SHA\",\"DHE-DSS-AES256-SHA\",\r\n \"ECDH-ECDSA-AES256-SHA\",\"ECDH-RSA-AES256-SHA\",\"AES256-SHA\",\r\n \"ECDHE-ECDSA-DES-CBC3-SHA\",\"ECDHE-RSA-DES-CBC3-SHA\",\"EDH-RSA-DES-CBC3-SHA\",\r\n \"EDH-DSS-DES-CBC3-SHA\",\"ECDH-ECDSA-DES-CBC3-SHA\",\"ECDH-RSA-DES-CBC3-SHA\",\r\n \"DES-CBC3-SHA\",\"ECDHE-ECDSA-AES128-SHA\",\"ECDHE-RSA-AES128-SHA\",\r\n \"DHE-RSA-AES128-SHA\",\"DHE-DSS-AES128-SHA\",\"ECDH-ECDSA-AES128-SHA\",\r\n \"ECDH-RSA-AES128-SHA\",\"AES128-SHA\"]\r\n```\r\n\r\nWhich doesn't appear to be compatible when used in `rabbitmq.config`. Issuing `rabbitmqctl eval 'ssl:cipher_suites().'` results in a list in this format:\r\n\r\n```\r\n# rabbitmqctl eval 'ssl:cipher_suites().'\r\n[{ecdhe_ecdsa,aes_256_gcm,null,sha384},\r\n {ecdhe_rsa,aes_256_gcm,null,sha384},\r\n {ecdhe_ecdsa,aes_256_cbc,sha384,sha384},\r\n {ecdhe_rsa,aes_256_cbc,sha384,sha384},\r\n {ecdh_ecdsa,aes_256_gcm,null,sha384},\r\n {ecdh_rsa,aes_256_gcm,null,sha384},\r\n {ecdh_ecdsa,aes_256_cbc,sha384,sha384},\r\n {ecdh_rsa,aes_256_cbc,sha384,sha384},\r\n {dhe_rsa,aes_256_gcm,null,sha384},\r\n {dhe_dss,aes_256_gcm,null,sha384},\r\n {dhe_rsa,aes_256_cbc,sha256},\r\n {dhe_dss,aes_256_cbc,sha256},\r\n {rsa,aes_256_gcm,null,sha384},\r\n {rsa,aes_256_cbc,sha256},\r\n {ecdhe_ecdsa,aes_128_gcm,null,sha256},\r\n {ecdhe_rsa,aes_128_gcm,null,sha256},\r\n {ecdhe_ecdsa,aes_128_cbc,sha256,sha256},\r\n {ecdhe_rsa,aes_128_cbc,sha256,sha256},\r\n {ecdh_ecdsa,aes_128_gcm,null,sha256},\r\n {ecdh_rsa,aes_128_gcm,null,sha256},\r\n {ecdh_ecdsa,aes_128_cbc,sha256,sha256},\r\n {ecdh_rsa,aes_128_cbc,sha256,sha256},\r\n {dhe_rsa,aes_128_gcm,null,sha256},\r\n {dhe_dss,aes_128_gcm,null,sha256},\r\n {dhe_rsa,aes_128_cbc,sha256},\r\n {dhe_dss,aes_128_cbc,sha256},\r\n {rsa,aes_128_gcm,null,sha256},\r\n {rsa,aes_128_cbc,sha256},\r\n {ecdhe_ecdsa,aes_256_cbc,sha},\r\n {ecdhe_rsa,aes_256_cbc,sha},\r\n {dhe_rsa,aes_256_cbc,sha},\r\n {dhe_dss,aes_256_cbc,sha},\r\n {ecdh_ecdsa,aes_256_cbc,sha},\r\n {ecdh_rsa,aes_256_cbc,sha},\r\n {rsa,aes_256_cbc,sha},\r\n {ecdhe_ecdsa,'3des_ede_cbc',sha},\r\n {ecdhe_rsa,'3des_ede_cbc',sha},\r\n {dhe_rsa,'3des_ede_cbc',sha},\r\n {dhe_dss,'3des_ede_cbc',sha},\r\n {ecdh_ecdsa,'3des_ede_cbc',sha},\r\n {ecdh_rsa,'3des_ede_cbc',sha},\r\n {rsa,'3des_ede_cbc',sha},\r\n {ecdhe_ecdsa,aes_128_cbc,sha},\r\n {ecdhe_rsa,aes_128_cbc,sha},\r\n {dhe_rsa,aes_128_cbc,sha},\r\n {dhe_dss,aes_128_cbc,sha},\r\n {ecdh_ecdsa,aes_128_cbc,sha},\r\n {ecdh_rsa,aes_128_cbc,sha},\r\n {rsa,aes_128_cbc,sha}]\r\n```\r\n\r\nWhich is usable in `rabbitmq.config`"},"comment":{"url":"https://api.github.com/repos/rabbitmq/rabbitmq-website/issues/comments/268188088","html_url":"https://github.com/rabbitmq/rabbitmq-website/pull/316#issuecomment-268188088","issue_url":"https://api.github.com/repos/rabbitmq/rabbitmq-website/issues/316","id":268188088,"user":{"login":"michaelklishin","id":1090,"avatar_url":"https://avatars.githubusercontent.com/u/1090?v=3","gravatar_id":"","url":"https://api.github.com/users/michaelklishin","html_url":"https://github.com/michaelklishin","followers_url":"https://api.github.com/users/michaelklishin/followers","following_url":"https://api.github.com/users/michaelklishin/following{/other_user}","gists_url":"https://api.github.com/users/michaelklishin/gists{/gist_id}","starred_url":"https://api.github.com/users/michaelklishin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michaelklishin/subscriptions","organizations_url":"https://api.github.com/users/michaelklishin/orgs","repos_url":"https://api.github.com/users/michaelklishin/repos","events_url":"https://api.github.com/users/michaelklishin/events{/privacy}","received_events_url":"https://api.github.com/users/michaelklishin/received_events","type":"User","site_admin":false},"created_at":"2016-12-20T08:49:42Z","updated_at":"2016-12-20T08:49:42Z","body":"I've deployed a similar patch that mentions both formats and that one of them uses Erlang terms. Thank you!"}}
{"actor":{"display_login":"michaelklishin"}}