diff --git a/test/tests/rabbitmq-tls/inet-dist-tls.config b/test/tests/rabbitmq-tls/inet-dist-tls.config new file mode 100644 index 0000000000000..5d83fab7cb647 --- /dev/null +++ b/test/tests/rabbitmq-tls/inet-dist-tls.config @@ -0,0 +1,17 @@ +[ + {server, [ + {cacertfile,"/certs/ca.crt"}, + {certfile, "/certs/cert.crt"}, + {keyfile, "/certs/private.key"}, + {secure_renegotiate, true}, + {verify, verify_peer}, + {fail_if_no_peer_cert, true} + ]}, + {client, [ + {cacertfile,"/certs/ca.crt"}, + {certfile, "/certs/cert.crt"}, + {keyfile, "/certs/private.key"}, + {secure_renegotiate, true}, + {verify, verify_peer} + ]} +]. diff --git a/test/tests/rabbitmq-tls/rabbitmq-env.conf b/test/tests/rabbitmq-tls/rabbitmq-env.conf index 18962237b57fa..3acb53d4d5c24 100644 --- a/test/tests/rabbitmq-tls/rabbitmq-env.conf +++ b/test/tests/rabbitmq-tls/rabbitmq-env.conf @@ -3,13 +3,11 @@ # https://www.rabbitmq.com/clustering-ssl.html ERL_SSL_PATH="$(erl -eval 'io:format("~p", [code:lib_dir(ssl, ebin)]),halt().' -noshell)" -sslErlArgs="-pa $ERL_SSL_PATH - -proto_dist inet_tls - -ssl_dist_opt server_certfile /certs/combined.pem - -ssl_dist_opt server_secure_renegotiate true client_secure_renegotiate true" +sslErlArgs="-pa $ERL_SSL_PATH -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inet-dist-tls.config" SERVER_ADDITIONAL_ERL_ARGS="$sslErlArgs" CTL_ERL_ARGS="$sslErlArgs" + if [ -n "$ERLANG_COOKIE" ]; then SERVER_ADDITIONAL_ERL_ARGS="$SERVER_ADDITIONAL_ERL_ARGS -setcookie $ERLANG_COOKIE" CTL_ERL_ARGS="$CTL_ERL_ARGS -setcookie $ERLANG_COOKIE" diff --git a/test/tests/rabbitmq-tls/run.sh b/test/tests/rabbitmq-tls/run.sh index 11f16756e656b..d45f86206ff4d 100755 --- a/test/tests/rabbitmq-tls/run.sh +++ b/test/tests/rabbitmq-tls/run.sh @@ -1,9 +1,10 @@ #!/usr/bin/env bash set -Eeuo pipefail +cname="rabbitmq-container-$RANDOM-$RANDOM" dir="$(dirname "$(readlink -f "$BASH_SOURCE")")" - serverImage="$("$dir/../image-name.sh" librarytest/rabbitmq-tls-server "$1")" + "$dir/../docker-build.sh" "$dir" "$serverImage" < /dev/null" EXIT