Skip to content

Conversation

@michaelklishin
Copy link
Collaborator

This is #12557 by @LoisSotoLopez.

@mergify
Copy link

mergify bot commented Oct 21, 2024

⚠️ The sha of the head commit of this PR conflicts with #12557. Mergify cannot evaluate rules on this PR. ⚠️

Provides a specific function to fix client ssl options, i.e.: apply all
fixes that are applied for TLS listeneres and clients on previous
versions but also sets `cacerts` option to CA certificates obtained by
`public_key:cacerts_get`, only when no `cacertfile` or `cacerts` are
provided.
@michaelklishin michaelklishin force-pushed the cloudamqp-use-public-key-cacerts-get branch from 6086f58 to 3ff7e82 Compare October 21, 2024 22:00
@michaelklishin
Copy link
Collaborator Author

The forced push was a rebase to make sure that #12502 is included (it addresses one specific kind of annoying CT suite flakes).

@michaelklishin michaelklishin added this to the 4.1.0 milestone Oct 21, 2024
@michaelklishin michaelklishin changed the title #12557 #12557: fall back to system-wide CA certificates (if available) when none are configured for AMQP 1.0 and AMQP 0-9-1 clients such as shovels Oct 21, 2024
@michaelklishin michaelklishin merged commit 61f0730 into main Oct 22, 2024
342 checks passed
@michaelklishin michaelklishin deleted the cloudamqp-use-public-key-cacerts-get branch October 22, 2024 00:24
michaelklishin added a commit that referenced this pull request Dec 11, 2024
lukebakken added a commit to amazon-mq/upstream-to-rabbitmq-server that referenced this pull request Nov 7, 2025
This uses the same technique as PR rabbitmq#12557 and rabbitmq#12564 to ensure that when
neither `cacerts` nor `cacertfile` are set, the system certs are used.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants