Merge pull request #1815 from rabbitmq/rabbitmq-server-1814

Honor cipher suite order in rabbitmq.conf

Author: michaelklishin

priv/schema/rabbit.schema

@@ -258,7 +258,7 @@ end}.
 {translation, "rabbit.ssl_options.ciphers",
 fun(Conf) ->
     Settings = cuttlefish_variable:filter_by_prefix("ssl_options.ciphers", Conf),
-    [V || {_, V} <- Settings]
+    lists:reverse([V || {_, V} <- Settings])
 end}.
 
 %% ===========================================================================

test/config_schema_SUITE_data/rabbit.snippets

@@ -326,15 +326,15 @@ tcp_listen_options.exit_on_close = false",
         {ssl_options,
             [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
              {ciphers, [
-               "DHE-RSA-AES256-GCM-SHA384",
+               "ECDHE-ECDSA-AES256-GCM-SHA384",
+               "ECDHE-RSA-AES256-GCM-SHA384",
+               "ECDHE-ECDSA-AES256-SHA384",
+               "ECDHE-RSA-AES256-SHA384",
                "ECDH-ECDSA-AES256-GCM-SHA384",
-               "ECDH-ECDSA-AES256-SHA384",
                "ECDH-RSA-AES256-GCM-SHA384",
+               "ECDH-ECDSA-AES256-SHA384",
                "ECDH-RSA-AES256-SHA384",
-               "ECDHE-ECDSA-AES256-GCM-SHA384",
-               "ECDHE-ECDSA-AES256-SHA384",
-               "ECDHE-RSA-AES256-GCM-SHA384",
-               "ECDHE-RSA-AES256-SHA384"
+               "DHE-RSA-AES256-GCM-SHA384"
              ]},
              {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
              {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},