Adds a few additional configuration options for SSL.
'ssl' is the primary one, it can be 'off', 'on', or 'only'.
If its off, no changes. If its 'on' then ssl support is
enabled and ssl_ca cert is sent to clients along the relation.
If its only, then all clients must connect using ssl.
The server cert/key and ca cert can be provided via config. If
they are not, the service will act as its own ca and provide
the ssl_ca cert to its related clients.
Affected files (+564, -106 lines):
A Makefile
A [revision details]
M charm-helpers.yaml
M config.yaml
M hooks/lib/utils.py
M hooks/rabbit_utils.py
M hooks/rabbitmq_server_relations.py
M lib/charmhelpers/contrib/openstack/context.py
M lib/charmhelpers/contrib/openstack/utils.py
A lib/charmhelpers/contrib/ssl/service.py
M lib/charmhelpers/core/hookenv.py
M revision
M templates/rabbitmq.config
Reviewers: mp+207912_ code.launchpad. net,
Message:
Please take a look.
Description:
SSL Support for RabbitMQ
Adds a few additional configuration options for SSL.
'ssl' is the primary one, it can be 'off', 'on', or 'only'.
If its off, no changes. If its 'on' then ssl support is
enabled and ssl_ca cert is sent to clients along the relation.
If its only, then all clients must connect using ssl.
The server cert/key and ca cert can be provided via config. If
they are not, the service will act as its own ca and provide
the ssl_ca cert to its related clients.
https:/ /code.launchpad .net/~hazmat/ charms/ precise/ rabbitmq- server/ ssl-everywhere/ +merge/ 207912
(do not edit description out of merge proposal)
Please review this at https:/ /codereview. appspot. com/68140043/
Affected files (+564, -106 lines): utils.py server_ relations. py s/contrib/ openstack/ context. py s/contrib/ openstack/ utils.py s/contrib/ ssl/service. py s/core/ hookenv. py rabbitmq. config
A Makefile
A [revision details]
M charm-helpers.yaml
M config.yaml
M hooks/lib/utils.py
M hooks/rabbit_
M hooks/rabbitmq_
M lib/charmhelper
M lib/charmhelper
A lib/charmhelper
M lib/charmhelper
M revision
M templates/