Setting up internode TLS for RabbitMQ

[Utkarsh Khare]

Hi,

I am referring to https://www.rabbitmq.com/clustering-ssl.html for enabling internode TLS for RabbitMQ. 
I am following Strategy 2 (using a separate file for internode TLS settings)

My Certificate / Key / CA file are correctly generated, present and have appropriate permissions.
I have created a tls.config file for TLS parameters (attached)
My rabbitmq-env config file is updated and references the tls.config file (attached) 
I've attached 3 configuration files below. (+advanced.config attached) 

It looks to me that since the RabbitMQ server is listening on 25672, internode TLS is up and running.
Nodes seem to be able to talk to each other since the rabbitmq logs from node0 mention that node1 and 2 are up and running.

However, It seems that the CLI tools are not able to use the above config, since rabbitmqctl and rabbitmq-diagnostics both fail consistently (error attached)

 

Is there anything extra needed to enable CLI tools to use the TLS configuration? 

Regards, 
Utkarsh 

[Utkarsh Khare]

Not sure if its usefull in any way, but the RabbitMQ version is 3.9.6

[Joseph L. Casale]

Post your rabbitmq.conf, the only detail I can see with the provided config is you specify the versions parameter in the advanced config and not in the internode file.

[Utkarsh Khare]

Thanks for your response, Joseph. 

Attached rabbitmq.conf file too now 

I will remove the version parameter from the advanced config and try it out.