TLS-related settings in rabbitmqadmin.conf

[gildas]

Is your feature request related to a problem? Please describe.

We should not have to use --use-tls and --tls-ca-cert-file arguments all the time, these arguments should be configured in the toml config file.

Describe the solution you'd like

[mynode]
...
use_tls = true
tls_ac_cert_file = "/path/to/cert.pem"

Describe alternatives you've considered

No response

Additional context

No response

[michaelklishin]

That's already the case for --use-tls which is just tls in rabbitmq.conf.

[gildas]

Oh ok.
The documentation does not mention this on https://www.rabbitmq.com/docs/management-cli
Heck, the documentation does not mention tls at all...

Then it is not working:

~/.rabbitmqadmin.conf

[mynode]
hostname = "there.com"
port = 443
vhost = "/"
username = "mqadmin"
password = "s3cr3t"
non_interactive = false
tls = true

(I tried true and "true")

Then:

$ rabbitmqadmin --node mynode list queues
┌──────────────────┬──────────────────────────────────────────────────────────────────────────────────────────────┐
│ key              │ value                                                                                        │
├──────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────┤
│ result           │ request failed                                                                               │
├──────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────┤
│ reason           │ HTTP API request failed: error sending request for url (http://there.com:443/api/queues/%2F) │
├──────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────┤
│ underlying error │ client error (SendRequest)                                                                   │
├──────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────┤
│ underlying error │ invalid HTTP version parsed                                                                  │
├──────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────┤
│ underlying error │ (none)                                                                                       │
└──────────────────┴──────────────────────────────────────────────────────────────────────────────────────────────┘

We can clearly see it is still trying on http instead of https. (when I provide --use-tls that works fine).

Running rabbitmqadmin --node mynode --tls-ca-cert-file /etc/ssl/certs/ca-certificates.crt list queues gives the same result.

And is there a way to also store the TLS CA Cert file path in the config?

FWIW, the version of my rabbitmqadmin: 2.4.0 on Linux x86_64.

[michaelklishin]

You need to specify both --use-tls (or tls in rabbitmqadmin.conf) and a CA certificate bundle.

Paths cannot be specified in rabbitmqadmin.conf, you are welcome to contribute their support (here's the most relevant part in the code).

[gildas]

You need to specify both --use-tls (or tls in rabbitmqadmin.conf) and a CA certificate bundle.

I tried that as I mentioned in the comment earlier and it is not working

Paths cannot be specified in rabbitmqadmin.conf, you are welcome to contribute their support (here's the most relevant part in the code).

I might try that if I can find some time.