{"action":"closed","issue":{"url":"https://api.github.com/repos/rabbitmq/chef-cookbook/issues/388","repository_url":"https://api.github.com/repos/rabbitmq/chef-cookbook","labels_url":"https://api.github.com/repos/rabbitmq/chef-cookbook/issues/388/labels{/name}","comments_url":"https://api.github.com/repos/rabbitmq/chef-cookbook/issues/388/comments","events_url":"https://api.github.com/repos/rabbitmq/chef-cookbook/issues/388/events","html_url":"https://github.com/rabbitmq/chef-cookbook/issues/388","id":164622604,"number":388,"title":"Enable SSL?","user":{"login":"TemporarilyOffline","id":6640956,"avatar_url":"https://avatars3.githubusercontent.com/u/6640956?v=4","gravatar_id":"","url":"https://api.github.com/users/TemporarilyOffline","html_url":"https://github.com/TemporarilyOffline","followers_url":"https://api.github.com/users/TemporarilyOffline/followers","following_url":"https://api.github.com/users/TemporarilyOffline/following{/other_user}","gists_url":"https://api.github.com/users/TemporarilyOffline/gists{/gist_id}","starred_url":"https://api.github.com/users/TemporarilyOffline/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TemporarilyOffline/subscriptions","organizations_url":"https://api.github.com/users/TemporarilyOffline/orgs","repos_url":"https://api.github.com/users/TemporarilyOffline/repos","events_url":"https://api.github.com/users/TemporarilyOffline/events{/privacy}","received_events_url":"https://api.github.com/users/TemporarilyOffline/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-07-08T21:46:41Z","updated_at":"2018-02-14T23:38:32Z","closed_at":"2018-02-14T23:38:32Z","author_association":"NONE","body":"I have followed the instructions in the README.md file for enabling SSL:\n**\nTo enable SSL turn `ssl` to `true` and set the paths to your cacert, cert and key files.\n\n``` ruby\nnode['rabbitmq']['ssl'] = true\nnode['rabbitmq']['ssl_cacert'] = '/path/to/cacert.pem'\nnode['rabbitmq']['ssl_cert'] = '/path/to/cert.pem'\nnode['rabbitmq']['ssl_key'] = '/path/to/key.pem'\n```\n\nA full list of SSL attributes can be found in [attributes/default.rb](attributes/default.rb).\n**\nI dug into the template code and noticed that it also wants version, dug into the code that calls the template and noticed that it wanted cipher, so I added those parameters:\n\n``` ruby\ndefault['rabbitmq']['ssl_versions'] = ['tlsv1.2']\ndefault['rabbitmq']['ssl_ciphers'] = ['{ecdhe_ecdsa,aes_128_cbc,sha256}', '{ecdhe_ecdsa,aes_256_cbc,sha}']\n```\n\nI've converged with 4.8.0, 4.7.0 and 4.6.0\n\nI'm running with test kitchen and chef 12.12.13\n\nIn all cases, there are no ssl options present in `/etc/rabbitmq/rabbitmq.conf` and nothing is listening on port 5671\n\nRabbitmq is installed and listening on 25762, 15672, 5672\n\nAny suggestions for getting rabbitmq ssl working?\n"}}
{"actor":{"display_login":"michaelklishin"}}