Enabling TLS support in RabbitMQ

To enable TLS support in the RabbitMQ Server application, complete the following tasks in the order in which they are presented:

1. Create the Certificate Authorities (CA) bundle, server certificate, and server key.
2. Configure the RabbitMQ node.

Creating the Certificate Authorities (CA) bundle, server certificate, and server key

The POS In-Store Server must have its own CA bundle, server certificate, and server key. For instructions on creating the certificates and key, refer to the RabbitMQ website (rabbitmq.com).

The following table lists the default filename for each certificate.

Configuring the RabbitMQ Node

The RabbitMQ node must be configured to know the location of the CA bundle, the server certificate, and the server key. The RabbitMQ node is configured using the following file.

Configuring the RabbitMQ node in the rabbitmq.conf.template file

To configure the rabbitmq.conf.template file, follow these steps:

1. Open the rabbitmq.conf.template file using a text editor.
2. Locate the attributes listed in the following table, remove the comment marks from the attributes, and then modify their values as specified.
   Note

   If an attribute is not found in the template file, add the attribute.

   Attribute	Value
   ssl_options.cacertfile	<directory of the ca_certificate.pem file> Example C:\ca\ca_certificate.pem
   ssl_options.certfile	<directory of the server_certificate.pem file> Example C:\server\server_certificate.pem
   ssl_options.keyfile	<directory of the private_key.pem file> Example C:\server\private_key.pem file
   ssl_options.client_renegotiation	true
   ssl_options.secure_renegotiate	true
   management.ssl.cacertfile	<directory of the ca_certificate.pem file> Example C:\test\ca_certificate.pem
   management.ssl.certfile	<directory of the server_certificate.pem file> Example C:\server\server_certificate.pem
   management.ssl.keyfile	<directory of the private_key.pem file> Example C:\server\private_key.pem file
   management.ssl.client_renegotiation	true
   management.ssl.secure_renegotiate	true

3. Save the file.

Configuring the RabbitMQ node in the advanced.config.template file

To configure the advanced.config.template file, follow these steps:

1. Open the advanced.config.template file using a text editor.
2. Copy and paste the following code after the first square bracket ([) in the file.
   Copy

   {rabbit, [
        {ssl_listeners, [5671]},
        {ssl_options, [{cacertfile,"<directory of the ca_certificate.pem file>"},                 
        {certfile,"<directory of the server_certificate.pem file>"},
        {keyfile,"<directory of the private_key.pem>"},
        {verify, verify_peer},
        {server_name_indication, disable},                  
        {versions, ['tlsv1.2']},              
        {fail_if_no_peer_cert, false}]}
   ]},

3. Enter the directory of the specified certificates and key. The edited section will look similar to the following image.

   

4. Locate the rabbitmq_shovel tag.
5. Replace the values for each attribute listed in the following table.

   Attribute	Value
   sources, broker	ampqps://<RabbitMQ administrator username>:<Password>@<Name or IP address of the Messaging Server Machine>:5671 Example amqps://administrator:Password1@153.77.213.26:5761
   destinations, broker	ampqps://<RabbitMQ administrator username>:<Password>@<Name or IP address of the In-Store Server machine>:5671 Example amqps://administrator:Password1@localhost:5761

   The edited section will look similar to the following sample image.

   

6. Save the changes.