{"action":"created","issue":{"url":"https://api.github.com/repos/pulp/pulp/issues/1767","labels_url":"https://api.github.com/repos/pulp/pulp/issues/1767/labels{/name}","comments_url":"https://api.github.com/repos/pulp/pulp/issues/1767/comments","events_url":"https://api.github.com/repos/pulp/pulp/issues/1767/events","html_url":"https://github.com/pulp/pulp/pull/1767","id":66518647,"number":1767,"title":"Allow setting the broker_login_method.","user":{"login":"hgschmie","id":39495,"avatar_url":"https://avatars.githubusercontent.com/u/39495?v=3","gravatar_id":"","url":"https://api.github.com/users/hgschmie","html_url":"https://github.com/hgschmie","followers_url":"https://api.github.com/users/hgschmie/followers","following_url":"https://api.github.com/users/hgschmie/following{/other_user}","gists_url":"https://api.github.com/users/hgschmie/gists{/gist_id}","starred_url":"https://api.github.com/users/hgschmie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hgschmie/subscriptions","organizations_url":"https://api.github.com/users/hgschmie/orgs","repos_url":"https://api.github.com/users/hgschmie/repos","events_url":"https://api.github.com/users/hgschmie/events{/privacy}","received_events_url":"https://api.github.com/users/hgschmie/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-04-06T03:47:07Z","updated_at":"2015-04-06T13:18:19Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/pulp/pulp/pulls/1767","html_url":"https://github.com/pulp/pulp/pull/1767","diff_url":"https://github.com/pulp/pulp/pull/1767.diff","patch_url":"https://github.com/pulp/pulp/pull/1767.patch"},"body":"When using RabbitMQ with SSL client certificates, it is necessary to use\r\nthe rabbitmq_auth_mechanism_ssl which uses the common_name (CN) of the\r\nclient certificate as user name and then use SASL EXTERNAL to have\r\nRabbitMQ pick up the configuration.\r\n\r\nUnfortunately, by default, pulp only supports the default (AMQPLAIN)\r\nauthentication and it can not be configured.\r\n\r\nThis change adds a new configuration parameter to the tasks section\r\nwhich allows setting the requested authentication mechanism through the\r\ncelery BROKER_LOGIN_METHOD configuration setting.\r\n\r\nThis allows using RabbitMQ with strict SSL client certificates:\r\n\r\n```erlang\r\n[\r\n  {rabbit, [\r\n    {ssl_listeners, [5671]},\r\n    {auth_mechanisms, ['EXTERNAL']},\r\n    {ssl_options, [\r\n      {cacertfile,           '.../cacertfile'},\r\n      {certfile,             '.../cert.crt'},\r\n      {keyfile,              '.../cert.key'},\r\n      {verify,               verify_peer},\r\n      {fail_if_no_peer_cert, true}\r\n    ]},\r\n    {ssl_cert_login_from,  common_name}]\r\n  }\r\n].\r\n```\r\n\r\nand adding the CN values from the client certificates as users to RabbitMQ."},"comment":{"url":"https://api.github.com/repos/pulp/pulp/issues/comments/90061235","html_url":"https://github.com/pulp/pulp/pull/1767#issuecomment-90061235","issue_url":"https://api.github.com/repos/pulp/pulp/issues/1767","id":90061235,"user":{"login":"beav","id":563254,"avatar_url":"https://avatars.githubusercontent.com/u/563254?v=3","gravatar_id":"","url":"https://api.github.com/users/beav","html_url":"https://github.com/beav","followers_url":"https://api.github.com/users/beav/followers","following_url":"https://api.github.com/users/beav/following{/other_user}","gists_url":"https://api.github.com/users/beav/gists{/gist_id}","starred_url":"https://api.github.com/users/beav/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beav/subscriptions","organizations_url":"https://api.github.com/users/beav/orgs","repos_url":"https://api.github.com/users/beav/repos","events_url":"https://api.github.com/users/beav/events{/privacy}","received_events_url":"https://api.github.com/users/beav/received_events","type":"User","site_admin":false},"created_at":"2015-04-06T13:18:19Z","updated_at":"2015-04-06T13:18:19Z","body":"ok test"}}