Hello, i can change the parameter in this way is not a problem.
We use for every other web-application in our cluster in the internal network SSL/TLS so we don't see why i must do it for the rabbitmq managment in a different way only because the puppet module can not handle this configuration case. For this reason we create our own fork and branch to fix it. And sometime i am really old in the mind... i don't like to spend energy to handshake, encrypt and decrypt if there is not necessary. Ciao Michele Am Samstag, 18. April 2015 11:47:05 UTC+2 schrieb Neil: > > Hello > > My 5 cents.... > > I'd prefer the parameter to be management_ssl and the default to be true > to maintain current behaviour > > Why not use SSL (well tls) between load bal and rabbitmq > > Thanks > > Neil > On 17 Apr 2015 19:11, "Michele Catalano" <ironp...@gmail.com <javascript:>> > wrote: > >> Hi, >> >> we current use the rabbitmq module in a production environment and for >> our use case we need to disable explicit the ssl port for the management >> console but enable it for the RabbitMQ self. >> This is needed because the web interfaces are using one SSL certificate >> that will only installed on the Nginx running on the load balancers. So the >> management interface don't know this SSL cert and it is also a different >> one than the cert that is used for the RabbitMQ self. >> >> This is with the config file not really a problem but over the rabbitMQ >> puppet module not possible. >> To solve this problem i add in a fork the new parameter no_ssl_management >> to disable the ssl only for management interface. >> >> to give all the other user from the rabbitmq puppet module i wan't to >> setup a issue and a pull request with this new feature. >> >> Some opposition against this feature? >> >> Ciao >> Michele >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to puppet-users...@googlegroups.com <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/puppet-users/22914846-9859-4fa2-a361-eee40660a8c3%40googlegroups.com >> >> <https://groups.google.com/d/msgid/puppet-users/22914846-9859-4fa2-a361-eee40660a8c3%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/c34d3f3a-48d0-4bc3-859d-9e1604b089a6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
