ssl_ca in ssl_utils.py double encoded when using external ca

Bug #1711558 reported by Martin Hellström
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
rabbitmq-server (Juju Charms Collection)
New
Undecided
Unassigned

Bug Description

When using the ssl_ca option on the rabbitmq the ssl_ca relation data will be base64 encoded twice. This is because the charm option should be a base64 encoded string according to the config.yaml

  ssl_ca:
    type: string
    description: |
      Certificate authority cert that the cert. Optional if the ssl_cert is
      signed by a ca recognized by the os. Format is base64 PEM (concatenated
      certs if needed).

And later on when the relation_data is set in 'hooks/ssl_utils.py' the string is base64 encoded again:

        if config('ssl_ca'):
            relation_data['ssl_ca'] = base64.b64encode(
                config('ssl_ca'))

This prevent clients from connecting to the rabbitmq cluster since they only decode it once.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.