8000 [bitnami/rabbitmq] 4.1.0-debian-12-r2 Broken TLS · Issue #81840 · bitnami/containers · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
[bitnami/rabbitmq] 4.1.0-debian-12-r2 Broken TLS #81840
Closed
@lezruk

Description

@lezruk

Name and Version

bitnami/rabbitmq:4.1.0-debian-12-r2

sha256-1a6ecb168fa5b24e90889917876ebb34bf778bcdc7e7fcfa0347ee816874db96

What architecture are you using?

amd64

What steps will reproduce the bug?

  1. RabbitMQ with MQTT plugin enabled and configured for TLS
  2. Upgraded image to bitnami/rabbitmq:4.1.0-debian-12-r2 from bitnami/rabbitmq:4.1.0-debian-12-r1
  3. Below rabbitmq.cnf for a reference
  4. TLS MQTT connection started failing
  5. Suspected reason Erlang 27->28 upgrade in this image
  6. Additional: Same failure observed for regular connection AMQP with TLS
## Clustering
cluster_partition_handling = ignore

## Defaults
# During the first start, RabbitMQ will create a vhost and a user
# These config items control what gets created
default_permissions.configure = .*
default_permissions.read = .*
default_permissions.write = .*
log.console = true
default_vhost = /
default_user = ....
default_pass = ....

## Networking
listeners.tcp.default = 5672
listeners.ssl.default = 5671

## Management
management.tcp.port = 15672
management.ssl.port = 15671

## Resource limits
# Set a free disk space limit relative to total available RAM
disk_free_limit.relative = 1.0

# A new style format snippet. This format is used by rabbitmq.conf files.
ssl_options.cacertfile           = /opt/bitnami/rabbitmq/certs/tls.crt
ssl_options.certfile             = /opt/bitnami/rabbitmq/certs/tls.crt
ssl_options.keyfile              = /opt/bitnami/rabbitmq/certs/tls.key
ssl_options.verify               = verify_none
ssl_options.fail_if_no_peer_cert = false


management.ssl.cacertfile = /opt/bitnami/rabbitmq/certs/tls.crt
management.ssl.certfile   = /opt/bitnami/rabbitmq/certs/tls.crt
management.ssl.keyfile    = /opt/bitnami/rabbitmq/certs/tls.key

management.ssl.verify = verify_none
management.ssl.fail_if_no_peer_cert = false

#MQTT

mqtt.listeners.tcp.default = 1883
mqtt.listeners.ssl.default = 8883

mqtt.tcp_listen_options.backlog = 4096
mqtt.tcp_listen_options.recbuf  = 131072
mqtt.tcp_listen_options.sndbuf  = 131072

mqtt.tcp_listen_options.keepalive = true
mqtt.tcp_listen_options.nodelay   = true

What is the expected behavior?

Successfull connection

What do you see instead?

Exception and connection drop

rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>   crasher:
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     initial call: rabbit_mqtt_reader:init/1
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     pid: <0.687.0>
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     registered_name: []
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     exception error: no function clause matching
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                      rabbit_net:getopts({sslsocket,#Port<0.64>,<0.686.0>,
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                                          <0.685.0>,gen_tcp,tls_gen_connection, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                                          #Ref<0.3610783483.50200578.175361>,
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                                          [{option_tracker,<0.628.0>}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                                           {session_tickets_tracker,disabled}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                                           {session_id_tracker,<0.629.0>}]},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                                         [sndbuf,recbuf,buffer]) (rabbit_net.erl:163)   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>       in function  rabbit_networking:tune_buffer_size_static/1 (rabbit_networking.erl:589) 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>       in call from rabbit_networking:tune_buffer_size/2 (rabbit_networking.erl:582) 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>       in call from rabbit_networking:handshake/3 (rabbit_networking.erl:571) 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>       in call from rabbit_mqtt_reader:init/1 (rabbit_mqtt_reader.erl:74)  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     ancestors: [<0.626.0>,<0.625.0>,<0.624.0>,<0.622.0>,<0.621.0>,
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                   rabbit_mqtt_sup,<0.596.0>]     
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     message_queue_len: 0      
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     messages: []                                                                                                                                               
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     links: [<0.626.0>] 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     dictionary: [{'$logger_metadata$',        
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>                       #{domain => [rabbitmq,connection,mqtt]}}]   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     trap_exit: true         
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     status: running                                                                                                                                            
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     heap_size: 376     
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     stack_size: 29                                                                                                                                             
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>     reductions: 150   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>   neighbours:                                                                                                                                                  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.969557-04:00 [error] <0.687.0>              
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.975102-04:00 [error] <0.626.0> Ranch listener {acceptor,{0,0,0,0,0,0,0,0},8883} had connection process started with rabbit_mqtt_reader:start_link/3 at 
<0.687.0> exit with reason: {function_clause,[{rabbit_net,getopts,[{sslsocket,#Port<0.64>,<0.686.0>,<0.685.0>,gen_tcp,tls_gen_connection,#Ref<0.3610783483.50200578.175361>,
[{option_tracker,<0.628.0>},{session_tickets_tracker,disabled},{session_id_tracker,<0.629.0>}]},[sndbufrecbuf,buffer[]],[{file,"rabbit_net.erl"},{line,163}]},
{rabbit_networking,tune_buffer_size_static,1,[{file,"rabbit_networking.erl"},{line,589}]},{rabbit_networking,tune_buffer_size,2,[{file,"rabbit_networking.erl"},
{line,582}]},{rabbit_networking,handshake,3,[{file,"rabbit_networking.erl"},{line,571}]},{rabbit_mqtt_reader,init,1,[{file,"rabbit_mqtt_reader.erl"},{line,74}]},
{proc_lib,init_p_do_apply,3,[{file,"proc_lib.erl"},{line,333}]}]}                               
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:08:57.975102-04:00 [error] <0.626.0>  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>   crasher:  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     initial call: rabbit_reader:init/3   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     pid: <0.13290.0>  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     registered_name: [] 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     exception error: no function clause matching   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                      rabbit_net:setopts({sslsocket,#Port<0.3013>,<0.13286.0>,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                                          <0.13285.0>,gen_tcp,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                                          tls_gen_connection,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                                          #Ref<0.3610783483.50462721.89082>,   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                                          [{option_tracker,<0.666.0>},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                                           {session_tickets_tracker,disabled},
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                                           {session_id_tracker,<0.667.0>}]},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                                         [{buffer,128}]) (rabbit_net.erl:168)
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>       in function  rabbit_networking:tune_buffer_size/2 (rabbit_networking.erl:576) 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>       in call from rabbit_networking:handshake/3 (rabbit_networking.erl:571) 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>       in call from rabbit_reader:init/3 (rabbit_reader.erl:161) 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     ancestors: [<0.13287.0>,<0.664.0>,<0.663.0>,<0.662.0>,<0.660.0>,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                   <0.659.0>,rabbit_sup,<0.216.0>]  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     message_queue_len: 0
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     messages: []      
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     links: [<0.13287.0>] 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     dictionary: []  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     trap_exit: false  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     status: running  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     heap_size: 376  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     stack_size: 29  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>     reductions: 146 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>   neighbours:     
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895046-04:00 [error] <0.13290.0>                      
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>     supervisor: {<0.13287.0>,rabbit_connection_sup}  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>     errorContext: child_terminated  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>     reason: {function_clause,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                 [{rabbit_net,setopts, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                      [{sslsocket,#Port<0.3013>,<0.13286.0>,<0.13285.0>,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                           gen_tcp,tls_gen_connection, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                           #Ref<0.3610783483.50462721.89082>,    
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                           [{option_tracker,<0.666.0>},   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                            {session_tickets_tracker,disabled},   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                            {session_id_tracker,<0.667.0>}]},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                       [{buffer,128}]],           
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                      [{file,"rabbit_net.erl"},{line,168}]}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                  {rabbit_networking,tune_buffer_size,2,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                      [{file,"rabbit_networking.erl"},{line,576}]},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                  {rabbit_networking,handshake,3,   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                      [{file,"rabbit_networking.erl"},{line,571}]}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                  {rabbit_reader,init,3,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                      [{file,"rabbit_reader.erl"},{line,161}]},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                  {proc_lib,init_p_do_apply,3,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                      [{file,"proc_lib.erl"},{line,333}]}]}   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>     offender: [{pid,<0.13290.0>},    
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                {id,reader},    
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                {mfargs,{rabbit_reader,start_link,  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                                       [{<0.13288.0>,<0.13289.0>}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                                        {acceptor,{0,0,0,0,0,0,0,0},5671}]}}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                {restart_type,transient},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                {significant,true},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                {shutdown,300000}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                {child_type,worker}]  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.895461-04:00 [error] <0.13287.0>                                      
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>     supervisor: {<0.13287.0>,rabbit_connection_sup} 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>     errorContext: shutdown   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>     reason: reached_max_restart_intensity  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>     offender: [{pid,<0.13290.0>},   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                {id,reader},    
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                {mfargs,{rabbit_reader,start_link, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                                       [{<0.13288.0>,<0.13289.0>},   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                                        {acceptor,{0,0,0,0,0,0,0,0},5671}]}},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                {restart_type,transient},  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                {significant,true}, 
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                {shutdown,300000},   
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                {child_type,worker}]  
rabbitmq-6bc78547b4-9b9gh 2025-05-30 18:28:45.896447-04:00 [error] <0.13287.0>                                       

Additional information

No issues with previous image
bitnami/rabbitmq:4.1.0-debian-12-r1
sha256-83b65e93bd5d1a03728828eccc0815b7b39f03b406a0b146ddb37c99304c389a

Metadata

Metadata

Assignees

Labels

rabbitmqsolvedtech-issuesThe user has a technical issue about an application

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    0