TRYING TO RESOLVE "AMQP Cleartext Authentication" Vulnerbilty #5912
Replies: 4 comments 5 replies
-
|
The SSL auth configuration is available for RabbitMQ. Provide more information so community can help you. |
Beta Was this translation helpful? Give feedback.
-
|
tried below but no luck- Login method to use (AMQPLAIN, PLAIN, EXTERNAL, etc.). Use SSL / TLS to connect to the messaging server. Same as appending "?ssl=true" at the end of the connection URL string.ssl = False ca_certs file contains a set of concatenated CA certificates, which are used to validate certificates passed from RabbitMQ.ssl_ca_certs = None Specifies whether a certificate is required from the other side of the connection, and whether it will be validated if provided.Valid values: none, optional, requiredssl_cert_reqs = None Certificate file used to identify the local connection (client).ssl_certfile = None Private keyfile used to identify the local connection against RabbitMQ.ssl_keyfile = None URL of the messaging server.url = amqp://guest:guest@127.0.0.1:5672// |
Beta Was this translation helpful? Give feedback.
-
Login method to use (AMQPLAIN, PLAIN, EXTERNAL, etc.).login_method = None Use SSL / TLS to connect to the messaging server. Same as appending "?ssl=true" at the end of the connection URL string.ssl = False ca_certs file contains a set of concatenated CA certificates, which are used to validate certificates passed from RabbitMQ.ssl_ca_certs = None Specifies whether a certificate is required from the other side of the connection, and whether it will be validated if provided.Valid values: none, optional, requiredssl_cert_reqs = None Certificate file used to identify the local connection (client).ssl_certfile = None Private keyfile used to identify the local connection against RabbitMQ.ssl_keyfile = None URL of the messaging server.url = amqp://guest:guest@127.0.0.1:5672// |
Beta Was this translation helpful? Give feedback.
-
|
Check the official RabbitMQ SSL guide:
|
Beta Was this translation helpful? Give feedback.
-
|
solutions are not worked in our environment |
Beta Was this translation helpful? Give feedback.
-
|
If the community is unable to provide the level of support you require to set up TLS, RabbitMQ or other 3rd party dependencies, you might want to consider contacting a partner for in-depth assistance. |
Beta Was this translation helpful? Give feedback.
-
|
is the partner portal is something funding project? |
Beta Was this translation helpful? Give feedback.
-
|
They are service providers that offer professional services for StackStorm. |
Beta Was this translation helpful? Give feedback.
-
|
how to avoid AMQP clear text vulnarability without implementing ssl at server level |
Beta Was this translation helpful? Give feedback.
-
we tried couple of solutions to fix vulnerbilitity - AMQP Cleartext Authentication while following documentation available on Stackstorm forum but still not be able to fix the vul....
please help..
Note - Stackstorm is installed on Linux machines.
Beta Was this translation helpful? Give feedback.
All reactions