replacing TLS certificates in cluster of RabbitMQ nodes

346 views
Skip to first unread message

Akhirul Islam

unread,
Jun 24, 2021, 7:56:38 AM6/24/21
to rabbitmq-users
Hi,
I am trying to replace the TLS certificates for RabbitMQ nodes in a cluster of two nodes.
I have performed the following steps.
1. Stops all the RabbitMQ nodes in the cluster.
2. Replaced the certificates in all the nodes.
3. Restarted all the nodes.

All nodes are coming up successfully, but nodes are not part of the cluster.

RabbitMQ version: 3.8.3
Erlang version: 22.3

Please help me on this.

Thanks and Regards
Akhirul Islam

Michal Kuratczyk

unread,
Jun 24, 2021, 8:32:06 AM6/24/21
to rabbitm...@googlegroups.com
Hi,

Are you talking about TLS certificates for client connections or for inter-node communication (https://www.rabbitmq.com/clustering-ssl.html)?

If client-server TLS then:
1. No need to shut down the nodes in the first place (just replace the cert files and they will be picked up within a few minutes), if you need to speed up the process you can run `rabbitmqctl eval "ssl:clear_pem_cache()."`
2. Nodes not forming the cluster doesn't seem related to the change - have you made any other changes?

Either way, please provide the logs (although inter-node TLS, which is an Erlang feature by the way, not a RabbitMQ feature, usually doesn't provide any useful logs).

Best,

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-user...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/rabbitmq-users/fe32dd47-b9ad-4d9d-a2d0-5b476f78815bn%40googlegroups.com.


--
Michał
RabbitMQ team

Akhirul Islam

unread,
Jun 24, 2021, 11:14:48 AM6/24/21
to rabbitm...@googlegroups.com
Hi,

Thanks for your reply.
This is for internode communication.

Thanks and regards
Akhirul Islam

You received this message because you are subscribed to a topic in the Google Groups "rabbitmq-users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/rabbitmq-users/CeYQ1e5KBsk/unsubscribe.
To unsubscribe from this group and all its topics, send an email to rabbitmq-user...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/rabbitmq-users/CAA81d0so8oY-9XwttyEG19aewR9prRpU4hhcBFw2BLZfV2O0iw%40mail.gmail.com.
Reply all
Reply to author
Forward
0 new messages