rabbitmq.config

[
  {ssl, [{versions, ['tlsv1.2', 'tlsv1.1', tlsv1]},
         {ciphers,  [{dhe_rsa,aes_256_cbc,sha}]}
        ]},

  {rabbit, [
     {ssl_listeners, [5672]},
     {tcp_listeners, []},
     {ssl_options, [{cacertfile,"/path/to/cacert.pem"},
                    {certfile,"/path/to/server.pem"},
                    {keyfile,"/path/to/server.pem"},
                    {verify,verify_peer},
                    {fail_if_no_peer_cert,false},
                    {versions, ['tlsv1.2', 'tlsv1.1', tlsv1]},
                    {ciphers,  [{dhe_rsa,aes_256_cbc,sha}]}
                   ]},
     {heartbeat,30}
   ]}
].