Make RabbitMQ running SSL + allow irma-brain to use SSL with RabbitMQ (issue #22)

[deloittem]

Make RabbitMQ running SSL + allow irma-brain to use SSL with RabbitMQ

This is related to issue:

• Make RabbitMQ running SSL + allow irma-brain to use SSL with RabbitMQ: #22

  Changelogs

• New RabbitMQ configuration template added in "./extras/rabbitmq"
• New folder SSL added in root repository, it will contain the certificates for irma-brain
• Port configuration added in brain.ini for easy switching between NO SSL / SSL
• SSL parameters added in brain.ini : activation switch, SSL certificate names in "./ssl"

  Install

  Making RabbitMQ running SSL

• Copy the RabbitMQ configuration template provided in "./extras/rabbitmq" to "/etc/rabbitmq"
• Restart RabbitMQ: sudo service rabbitmq-server restart

  Allow irma-brain to use SSL with RabbitMQ

• Update PORT in brain.ini from 5672 to 5671. Except if you change the default port defined in the the RabbitMQ configuration template provided in "irma-brain/extras/rabbitmq"
• Update activate_ssl switch in brain.ini to value yes
• Put the SSL certificates (CA_CERT, KEY_FILE, CERT_FILE) in "./ssl"
• Update ca_certs, keyfile and certfile in brain.ini according to the filenames in "./ssl"

  Note

  If you are switching to ssl from an already running no_ssl version, please do the following on irma-brain RabbitMQ server:

• sudo rabbitmqctl stop_app
• sudo rabbitmqctl reset
• sudo rabbitmqctl start_app
• create again the RabbitMQ vhosts, usernames and passwords:
• sudo ./extras/scripts/rabbitmq/rmq_adduser.sh probe probe mqprobe
• sudo ./extras/scripts/rabbitmq/rmq_adduser.sh brain brain mqbrain
• sudo ./extras/scripts/rabbitmq/rmq_adduser.sh frontend frontend mqfrontend

[ch0k0bn]

merged