pivotal-cf / cf-rabbitmq-release

A BOSH Release of RabbitMQ
Apache License 2.0
26 stars 55 forks source link

RMQFPAS-107 changes for inter-node TLS #949

Closed lukebakken closed 4 months ago

lukebakken commented 4 months ago
lukebakken commented 4 months ago

@MirahImage @Zerpet

This PR isn't quite ready because I'm not quite sure how this file is used:

https://github.com/pivotal-cf/cf-rabbitmq-release/pull/949/files#diff-282a110ac269b013af57dd19e47c3605b4e6427ce597c0d6d1b951fce47b4c91L8-R8

The file does not contain ERL_SSL_PATH=... like the generated rabbitmq-env.conf file.

Speaking of ERL_SSL_PATH, I searched and searched and could NOT figure out how the variable is set in a BOSH / CF release. It has been driving me CRAZY today 🤪

In the environment that @Zerpet built today (2024-06-21) here is the file where the var is set:

/var/vcap/store/rabbitmq/etc/rabbitmq/rabbitmq-env.conf

... and here is the value:

ERL_SSL_PATH="/var/vcap/packages/erlang/lib/erlang/lib/ssl-11.1.4/ebin"

Again, I have no idea how that line is inserted into the top of the rabbitmq-env.conf file!

MirahImage commented 4 months ago

I have no clue how the rabbitmq-env.conf file is even created. It's not templated by bosh, and it only appears referenced in the other scripts.

MirahImage commented 4 months ago

FYI, this PR needs to be made against pivotal-cf/main. Unfortunately, due to weirdness on bosh.io, the default branch needs to remain release despite us not accepting PRs against it.