Skip to content

Commit

Permalink
Remove invalid TLS setting
Browse files Browse the repository at this point in the history
OTP 26 no longer ignores `fail_if_no_peer_cert` for a `client` setting.
Instead, distributed Erlang fails without informative error messages.

See the following issues:

* erlang/otp#7497
* rabbitmq/rabbitmq-website#1687

`customize_hostname_check` is client only
  • Loading branch information
lukebakken committed Jul 17, 2023
1 parent 90408d5 commit f5c9a1b
Showing 1 changed file with 2 additions and 6 deletions.
8 changes: 2 additions & 6 deletions docs/examples/mtls-inter-node/inter_node_tls.config
Original file line number Diff line number Diff line change
Expand Up @@ -5,20 +5,16 @@
{keyfile, "/etc/rabbitmq/certs/tls.key"},
{secure_renegotiate, true},
{fail_if_no_peer_cert, true},
{verify, verify_peer},
{customize_hostname_check, [
{match_fun, public_key:pkix_verify_hostname_match_fun(https)}
]}
{verify, verify_peer}
]},
{client, [
{cacertfile, "/etc/rabbitmq/certs/ca.crt"},
{certfile, "/etc/rabbitmq/certs/tls.crt"},
{keyfile, "/etc/rabbitmq/certs/tls.key"},
{secure_renegotiate, true},
{fail_if_no_peer_cert, true},
{verify, verify_peer},
{customize_hostname_check, [
{match_fun, public_key:pkix_verify_hostname_match_fun(https)}
]}
]}
].
].

0 comments on commit f5c9a1b

Please sign in to comment.