search

voxpupuli / puppet-rabbitmq

RabbitMQ Puppet Module
http://forge.puppetlabs.com/puppet/rabbitmq
Apache License 2.0
171 stars 500 forks source link

Add client_renegotiation ssl option, use more ssl options in management plugin #1024

Closed wyardley closed 1 week ago

wyardley commented 1 week ago

Rework of #906, credit to @Infraded

  1. Adds the option for client_renegotiation to rabbitmq config
  2. Copies multiple options from rabbitmq config to management plugin config similar to existing ssl settings
    • client_renegotiation
    • secure_renegotiate
    • reuse_sessions
    • honor_cipher_order
  3. Wraps client_renegotiation and secure_renegotiate in a conditional to not include them when enabling TLSv1.3 as they are incompatible
  4. Updates/add tests for client_renegotation setting and TLSv1.3 conditional

@Infraded I reworked your PR, since the conflicts still hadn't been resolved. This necessitated rewriting the template changes in epp.

Probably should be squash merged

This Pull Request (PR) fixes the following issues

Closes #906