Skip to content

Commit

Permalink
Add option for wildcard certificates to docs
Browse files Browse the repository at this point in the history
Matching wildcard certificates with the auth_backend_http plugin requires an additional option. See: https://erlang.org/pipermail/erlang-questions/2019-October/098529.html
  • Loading branch information
TribuneX authored and Sascha Bleidner committed Sep 29, 2022
1 parent 76b79fb commit cfa0d4d
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions deps/rabbitmq_auth_backend_http/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -149,6 +149,11 @@ configure the plugin to use a CA and client certificate/key pair using the `rabb

It is recommended to use TLS for authentication and enable peer verification.

### Wildcard Certificates

If the certificate of your Web Server should be matched against a wildcard certificate in your `cacertfile`, the following option must be added to the `ssl_options`:

{customize_hostname_check, [{match_fun,public_key:pkix_verify_hostname_match_fun(https)}]}

## Debugging

Expand Down

0 comments on commit cfa0d4d

Please sign in to comment.