actually bother to verify certs!
This commit is contained in:
		
							parent
							
								
									2fd641ff80
								
							
						
					
					
						commit
						855c7fe475
					
				|  | @ -69,7 +69,7 @@ SSL := true | |||
| ALL_SSL := { $(MAKE) test_ssl || OK_ALL=false; } | ||||
| ALL_SSL_COVERAGE := { $(MAKE) test_ssl_coverage || OK_ALL=false; } | ||||
| SSL_BROKER_ARGS := -rabbit ssl_listeners [{\\\"0.0.0.0\\\",5671}] \
 | ||||
| 	-rabbit ssl_options [{cacertfile,\\\"$(SSL_CERTS_DIR)/testca/cacert.pem\\\"},{certfile,\\\"$(SSL_CERTS_DIR)/server/cert.pem\\\"},{keyfile,\\\"$(SSL_CERTS_DIR)/server/key.pem\\\"}] \
 | ||||
| 	-rabbit ssl_options [{cacertfile,\\\"$(SSL_CERTS_DIR)/testca/cacert.pem\\\"},{certfile,\\\"$(SSL_CERTS_DIR)/server/cert.pem\\\"},{keyfile,\\\"$(SSL_CERTS_DIR)/server/key.pem\\\"},{verify,verify_peer},{fail_if_no_peer_cert,true}] \
 | ||||
| 	-erlang_client_ssl_dir \"$(SSL_CERTS_DIR)\" | ||||
| else | ||||
| SSL := @echo No SSL_CERTS_DIR defined. && false | ||||
|  |  | |||
|  | @ -83,7 +83,8 @@ new_connection() -> | |||
|                                   [{cacertfile, CertsDir ++ "/testca/cacert.pem"}, | ||||
|                                    {certfile, CertsDir ++ "/client/cert.pem"}, | ||||
|                                    {keyfile, CertsDir ++ "/client/key.pem"}, | ||||
|                                    {verify, verify_peer}]). | ||||
|                                    {verify, verify_peer}, | ||||
|                                    {fail_if_no_peer_cert, true}]). | ||||
| 
 | ||||
| test_coverage() -> | ||||
|     rabbit_misc:enable_cover(), | ||||
|  |  | |||
		Loading…
	
		Reference in New Issue