Settings not populating when RabbitMQ is using SSL
Description
Environment
- OS (where OpenBAS server runs): any
- OpenBAS version: 1.7.0
- OpenBAS client: frontend
- Other environment details:
Reproducible Steps
Steps to create the smallest reproducible scenario:
- Have a rabbitMQ with SSL
- Go to the settings page
- All settings do not populate and a call is returning a 500 error
Expected Output
No 500 error and settings populated
Actual Output
Additional information
Screenshots (optional)
In the logs, we can see this :
java.lang.IllegalArgumentException: [https://] is not a valid HTTP URL
at org.springframework.web.util.UriComponentsBuilder.fromUriString(UriComponentsBuilder.java:247) ~[spring-web-6.1.1.jar!/:6.1.1]
at org.springframework.web.util.DefaultUriBuilderFactory$DefaultUriBuilder.initUriComponentsBuilder(DefaultUriBuilderFactory.java:248) ~[spring-web-6.1.1.jar!/:6.1.1]
at org.springframework.web.util.DefaultUriBuilderFactory$DefaultUriBuilder.
This points to an issue with how we call rabbitMQ when SSL is activated. Two possible solutions :
- Have a properly secured call by adding the keystore used to secure the rabbitMQ (some info : https://www.baeldung.com/spring-resttemplate-secure-https-service )
- Have an unsecured call as those two components are at our hands ( https://stackoverflow.com/questions/4072585/disabling-ssl-certificate-validation-in-spring-resttemplate )
Suggestion : do not choose and add a way to have the call secured with the keystore or unsecured with an option in the properties
Reopen because the RabbitMQ version is not displayed anymore
Critical removed because our prospect qualified the bug as low impact
@Dimfacion Do you have an ETA on this issue ?
@RomuDeuxfois I need to take time to work on this. I'm scheduling some dedicated time next week so we can move on.