diff --git a/docs/source/install/config/config.rst b/docs/source/install/config/config.rst index e394ddf05..2372706ad 100644 --- a/docs/source/install/config/config.rst +++ b/docs/source/install/config/config.rst @@ -48,8 +48,8 @@ In :github_st2:`/etc/st2/st2.conf ` include the following se * To understand more about setting up a MongoDB replica set, see https://docs.mongodb.com/v3.4/tutorial/deploy-replica-set/ -|st2| also supports SSL/TLS to encrypt connections. A few extra properties need be added to the -configuration apart from the ones outlined above. +|st2| also supports SSL/TLS to encrypt MongoDB connections. A few extra properties need be added to +the configuration apart from the ones outlined above. In :github_st2:`/etc/st2/st2.conf ` include the following section: @@ -76,7 +76,7 @@ In :github_st2:`/etc/st2/st2.conf ` include the following se * ``ssl_match_hostname`` - Enable or disable hostname matching. Not recommended to disable and defaults to True. -.. note:: +.. note:: Only certain distributions of MongoDB support SSL/TLS: @@ -98,6 +98,25 @@ In :github_st2:`/etc/st2/st2.conf ` include the following se The ``#RMQ_VHOST`` property is optional and can be left blank. +|st2| also supports SSL/TLS to encrypt RabbitMQ connections. To enable SSL, you need to pass +``?ssl=true`` query parameter at the end of the connection URL. + +For example: + +.. code-block:: ini + + url = amqp://guest:guest@127.0.0.1:5671/?ssl=true + +Keep in mind that RabbitMQ server needs to be configured to enable TLS support. +For more information, refer to the official documentation - `Enabling TLS Support in RabbitMQ +`_. + +.. note:: + + At the moment TLS / SSL is only supported for secure connections to RabbitMQ + server. Peer verification and client side certificate authentication is + currently not supported. + .. _ref-rabbitmq-cluster-config: |st2| also supports `RabbitMQ cluster `_. @@ -111,7 +130,6 @@ In :github_st2:`/etc/st2/st2.conf ` include the following se amqp://#RMQ_USER:#RMQ_PASSWD@#RMQ_NODE_2:#RMQ_PORT/#RMQ_VHOST, amqp://#RMQ_USER:#RMQ_PASSWD@#RMQ_NODE_3:#RMQ_PORT/#RMQ_VHOST - * To understand more about setting up a RabbitMQ cluster, see https://www.rabbitmq.com/clustering.html * RabbitMQ HA guide - https://www.rabbitmq.com/ha.html