client.cfg

collectives = mcollective
connector = rabbitmq
default_discovery_method = mc
direct_addressing = 1
direct_addressing_threshold = 10
libdir = /usr/local/libexec/mcollective:/usr/libexec/mcollective
logger_type = console
loglevel = debug
main_collective = mcollective
plugin.rabbitmq.pool.1.host = ms1
plugin.rabbitmq.pool.1.password = marionette
plugin.rabbitmq.pool.1.port = 61614
plugin.rabbitmq.pool.1.ssl = 1
plugin.rabbitmq.pool.1.ssl.ca = /home/mcollective/.mcollective.d/credentials/certs/ca.pem
plugin.rabbitmq.pool.1.ssl.cert = /home/mcollective/.mcollective.d/credentials/certs/server_public.pem
plugin.rabbitmq.pool.1.ssl.fallback = 0
plugin.rabbitmq.pool.1.ssl.key = /home/mcollective/.mcollective.d/credentials/private_keys/mcollective.pem
plugin.rabbitmq.pool.1.user = mcollective
plugin.rabbitmq.pool.size = 1
plugin.rabbitmq.randomize = true
plugin.rabbitmq.vhost = /mcollective
plugin.ssl_client_cert_dir = /etc/mcollective/clients
plugin.ssl_client_private = /home/mcollective/.mcollective.d/credentials/private_keys/mcollective.pem
plugin.ssl_client_public = /home/mcollective/.mcollective.d/credentials/certs/mcollective.pem
plugin.ssl_server_public = /home/mcollective/.mcollective.d/credentials/certs/server_public.pem
rpclimitmethod = first
securityprovider = ssl
ttl = 60

rabbitmq-sasl.log

=CRASH REPORT==== 12-May-2014::12:15:09 ===
  crasher:
    initial call: rabbit_stomp_reader:init/3
    pid: <0.831.0>
    registered_name: []
    exception error: no match of right hand side value
                     {error,{ssl_upgrade_error,timeout}}
      in function  rabbit_stomp_reader:go/3
      in call from rabbit_stomp_reader:init/3
    ancestors: [<0.829.0>,rabbit_stomp_client_sup_sup,rabbit_stomp_sup,
                  <0.255.0>]
    messages: []
    links: [<0.829.0>]
    dictionary: []
    trap_exit: false
    status: running
    heap_size: 610
    stack_size: 27
    reductions: 1376
  neighbours:

=SUPERVISOR REPORT==== 12-May-2014::12:15:09 ===
     Supervisor: {<0.829.0>,rabbit_stomp_client_sup}
     Context:    child_terminated
     Reason:     {badmatch,{error,{ssl_upgrade_error,timeout}}}
     Offender:   [{pid,<0.831.0>},
                  {name,rabbit_stomp_reader},
                  {mfargs,
                      {rabbit_stomp_reader,start_link,
                          [<0.829.0>,<0.830.0>,
                           {stomp_configuration,"guest","guest",false,
                               false}]}},
                  {restart_type,transient},
                  {shutdown,4294967295},
                  {child_type,worker}]


=SUPERVISOR REPORT==== 12-May-2014::12:15:09 ===
     Supervisor: {<0.829.0>,rabbit_stomp_client_sup}
     Context:    shutdown
     Reason:     reached_max_restart_intensity
     Offender:   [{pid,<0.831.0>},
                  {name,rabbit_stomp_reader},
                  {mfargs,
                      {rabbit_stomp_reader,start_link,
                          [<0.829.0>,<0.830.0>,
                           {stomp_configuration,"guest","guest",false,
                               false}]}},
                  {restart_type,transient},
                  {shutdown,4294967295},
                  {child_type,worker}]

rabbitmq.config

% This file managed by Puppet
% Template Path: rabbitmq/templates/rabbitmq.config
[
  {rabbit, [

    {ssl_listeners, [5671]},
    {ssl_options, [{cacertfile,"/etc/rabbitmq/ssl/ca.pem"},
                    {certfile,"/etc/rabbitmq/ssl/server_public.pem"},
                    {keyfile,"/etc/rabbitmq/ssl/server_private.pem"},
                    {verify,verify_peer},
                    {fail_if_no_peer_cert,true},
                    {ssl_cert_login_from, common_name}
    ]},
    {auth_mechanisms, ['EXTERNAL']}
  ]}
,
% Configure the Stomp Plugin listening port
  {rabbitmq_stomp, [
    {tcp_listeners, [61613]}
,
    {ssl_listeners, [61614]},
    {ssl_cert_login, true}
  ]}
].
% EOF

rabbitmq.log

=INFO REPORT==== 14-May-2014::15:56:52 ===
accepting STOMP connection <0.350.0> ([::1]:34737 -> [::1]:61614)

=WARNING REPORT==== 14-May-2014::15:56:52 ===
STOMP login failed for user "CN=mcollective-servers"

=ERROR REPORT==== 14-May-2014::15:56:52 ===
STOMP error frame sent:
Message: "Bad CONNECT"
Detail: "Access refused for user 'CN=mcollective-servers'\n"
Server private detail: none

server.cfg

classesfile = /var/lib/puppet/state/classes.txt
collectives = mcollective
connector = rabbitmq
daemonize = 1
direct_addressing = 1
factsource = yaml
libdir = /opt/ericsson/nms/litp/etc/mcollective:/usr/libexec/mcollective
logfile = /var/log/mcollective.log
loglevel = debug
main_collective = mcollective
plugin.actionpolicy.allow_unconfigured = 1
plugin.rabbitmq.max_reconnect_attempts = 5
plugin.rabbitmq.pool.1.host = ms1
plugin.rabbitmq.pool.1.password = marionette
plugin.rabbitmq.pool.1.port = 61614
plugin.rabbitmq.pool.1.ssl = 1
plugin.rabbitmq.pool.1.ssl.ca = /etc/mcollective/ca.pem
plugin.rabbitmq.pool.1.ssl.cert = /etc/mcollective/server_public.pem
plugin.rabbitmq.pool.1.ssl.fallback = 0
plugin.rabbitmq.pool.1.ssl.key = /etc/mcollective/server_private.pem
plugin.rabbitmq.pool.1.user = mcollective
plugin.rabbitmq.pool.size = 1
plugin.rabbitmq.randomize = true
plugin.rabbitmq.vhost = /mcollective
plugin.rpcaudit.logfile = /var/log/mcollective-audit.log
plugin.ssl_client_cert_dir = /etc/mcollective/clients
plugin.ssl_server_private = /etc/mcollective/server_private.pem
plugin.ssl_server_public = /etc/mcollective/server_public.pem
plugin.yaml = /etc/mcollective/facts.yaml
rpcaudit = 1
rpcauditprovider = logfile
rpcauthorization = 1
rpcauthprovider = action_policy
securityprovider = ssl