From c84982d86aeb10b2b9cc32b77d98e746106667e6 Mon Sep 17 00:00:00 2001 From: Tomaz Muraus Date: Sat, 17 Apr 2021 11:10:14 +0200 Subject: [PATCH] Add a note on combining URL + config level SSL options for messaging. --- docs/source/install/config/config.rst | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/source/install/config/config.rst b/docs/source/install/config/config.rst index 4d35cf19a..9b20cc532 100644 --- a/docs/source/install/config/config.rst +++ b/docs/source/install/config/config.rst @@ -144,6 +144,14 @@ documented below are also supported: * ``login_method`` - Login method to use. Default is ``PLAIN``. Other possible options are ``AMQPLAIN`` and ``EXTERNAL``. +.. note:: + + If you want to use custom SSL settings (e.g. using a different ca bundle or similar) you + should specify all those options as part of the st2.conf and also do the same for enabling ssl + using ``messaging.ssl`` option. Combining URL and config parameters for SSL doesn't work - if + you enable ssl as part of the URL it will use default SSL settings, but you won't be able to + specify a custom value for ``cert_reqs`` ``ca_certs`` and other SSL related options. + .. note:: RabbitMQ doesn't expose an SSL / TLS listener by default and needs to be configured to enable