rabbitmq-website
rabbitmq-website copied to clipboard
TLS 1.3 does not support all TLS options
trafficstars
The following options will cause RabbitMQ to crash upon startup if TLS 1.3 is the only enabled version:
ssl_options.client_renegotiation
ssl_options.secure_renegotiate
Reported in this rabbitmq-users discussion:
https://groups.google.com/g/rabbitmq-users/c/ZLdFmiqETZc/m/ED85hR7eAgAJ
I'm not quite sure if this is just a documentation issue or if schema validation should take this into account as well.
We can try special casing in configuration validation.
@michaelklishin this commit added ssl:handle_options which could be used to validate options earlier - https://github.com/erlang/otp/commit/6a6410b3d614fbb9418f60f39900e169dc7f0bff