[RabbitMQ] TLS 적용

# SSL Plugin 활성화
sudo rabbitmq-plugins enable rabbitmq_auth_mechanism_ssl

# TLS CA 설치
cd /etc/rabbitmq

sudo git clone https://github.com/michaelklishin/tls-gen tls-gen

cd tls-gen/basic

sudo apt install make

sudo make PASSWORD=test1234 CA=43.200.238.124

cd result

sudo mkdir /etc/rabbitmq/cert

sudo cp * /etc/rabbitmq/cert

sudo chown -R rabbitmq: /etc/rabbitmq/cert


# TLS 설정
sudo vi rabbitmq-env.conf

[하단에 추가]

~

RABBITMQ_CONFIG_FILE=/etc/rabbitmq/rabbitmq.conf

# 설정파일 생성
cd /etc/rabbitmq

 

sudo vi rabbitmq.conf

listeners.tcp = none # non-TLS 비활성화
mqtt.listeners.ssl.default = 5671           # TLS 포트 지정

ssl_options.cacertfile = /etc/rabbitmq/cert/ca_certificate.pem
ssl_options.certfile   = /etc/rabbitmq/cert/server_ip-10-0-0-10_certificate.pem
ssl_options.keyfile    = /etc/rabbitmq/cert/server_ip-10-0-0-10_key.pem
ssl_options.password   = test1234             # 인증키 암호화 패스워드
ssl_options.verify     = verify_peer        # peer 인증 사용
ssl_options.fail_if_no_peer_cert = true     # 인증서 없는 클라이언트 거부
ssl_options.versions.1 = tlsv1.3            # tls 1.3 버전 사용

sudo chown -R rabbitmq: rabbitmq.conf

# rabbitmq 재시작
sudo systemctl restart rabbitmq-server.service

[출처]

https://jookting.tistory.com/113?category=945647