rabbitmq-server icon indicating copy to clipboard operation
rabbitmq-server copied to clipboard

HTTP API listener: make it possible to disable non-TLS listeners

Open michaelklishin opened this issue 1 year ago • 1 comments

Plain (non-TLS) AMQP 0-9-1 and AMQP 1.0 listeners can be disabled. The same should be possible for the non-TLS HTTP API listener.

michaelklishin avatar Aug 31 '23 18:08 michaelklishin

I meant to quickly knock it off, but discovered it can be done already.

If the ssl listener is configered and no management.tcp settings are in the config, HTTP socket will be disabled. Can be verified by enabling the plugin with this minimal config (and certs present):

management.ssl.port = 8443
management.ssl.certfile = /etc/rabbitmq/example.com.crt
management.ssl.keyfile = /etc/rabbitmq/example.com.key

# management.tcp.port = 8080

See rabbit_mqmq_app:get_listeners_config/0.

illotum avatar Sep 27 '23 22:09 illotum