SSL Connection example

[JRafiei]

Hi. Could you please provide some examples regarding ssl connection to the rabbitmq server? Specially in cases that there is no client certificate.

[mosquito]

Just use amqps://guest:guest@localhost/. When server has self-signed certificate, just add cafile parameter. e.g. amqps://guest:guest@localhost/?cafile=/home/user/.ssl/ca.pem

[andvikt]

cafile does not work.

import asyncio
import aio_pika

async def main() -> None:
    connection = await aio_pika.connect_robust(
        "amqps://some:some@11.11.11.11/?"
        "cafile=ssl/res/ca-cert.pem&"
        "keyfile=ssl/res/client-key.pem&"
        "certfile=ssl/res/client-cert.pem",
    )

    async with connection:
        channel = await connection.channel()

if __name__ == "__main__":
    asyncio.run(main())

Throws error: ConnectionError: [Errno 1] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1129)

So the only option is to set no_verify_ssl=1 which is insecure at all.

So maybe I am doing something wrong?

[wangxin688]

see example below:

import asyncio
import aio_pika
import ssl

async def main() -> None:
    context = ssl.create_default_context(cafile=f"{PROJECT_DIR}/certs/ca_certificate.pem")
    context.check_hostname = False
    context.verify_mode = ssl.CERT_REQUIRED
    context.load_cert_chain(
            certfile=f"{PROJECT_DIR}/certs/client_certificate.pem",
            keyfile=f"{PROJECT_DIR}/certs/client_key.pem",
        )
    connection = await aio_pika.connect_robust(
        url="amqps://some:some@11.11.11.11/?"
        ssl=True, ssl_context=context
    )

    async with connection:
        channel = await connection.channel()

if __name__ == "__main__":
    asyncio.run(main())