无法重新加载RabbitMQ SSL缓存

发布于 2025-02-14 02:01:16 字数 1288 浏览 0 评论 0 原文

当我的兔子SSL证书更新时,我会遇到问题。我的设置的核心如下:

  • vps运行rabbitmq “ nofollow noreferrer”> community Edition docker Container
  • SSL证书在VPS上使用LetSencrypt进行配置,并通过安装的文件夹可用于Docker Image的证书
  • 自动续订通过安装绑定到/plugins/rabbitmq_management-- {rmq-version}/priv/www 的文件夹,并指定 - webroot-path - /代码>作为该文件夹。这允许续订可以在不关闭服务器的情况下工作,因为/priv/www 文件夹是牛仔

现在从问题中提供静态资产的文件夹,即使续订成功,服务器似乎也没有拾取除非重新启动Docker容器,否则更改的SSL证书。对于这个问题,我发现最接近的解决方案是要清除证书缓存,但是当我尝试该命令时,我收到的错误消息是:无法要连接到{cluser-name}的EPMD(端口4369).localdomain:nxDomain(不存在的域)。我还没有找到解决这个问题的解决方案。我已经看过此建议检查该内容的内容/etc/hosts/文件,我的内容与该博客文章中所示的内容不同。特别是我的简单显示:

127.0.0.1       localhost
...

没有 localhost.localdomain 文章中显示的部分。我很想超越这一点。任何帮助将不胜感激。谢谢你!

I'm having problems reloading my rabbitmq ssl certs when they get renewed. The core of my setup is as follows:

  • vps running the rabbitmq community edition docker container
  • ssl certs provisioned using letsencrypt on the vps, with the certs available to the docker image via a mounted folder
  • auto-renewal configured by mounting a folder that gets bound to /plugins/rabbitmq_management-{rmq-version}/priv/www in the docker container, and specifying the --webroot-path as that folder. This allows the renewal to work without shutting down the server because the /priv/www folder is where cowboy serves static assets from

The problem now is that even with the renewal successful, the server seems to not pick up the changed ssl certs unless the docker container is restarted. For this problem the closest I've found to a possible solution is this recommendation to clear the certs cache, but when I try that command the error message I get is this: unable to connect to epmd (port 4369) on {cluser-name}.localdomain: nxdomain (non-existing domain). I haven't found a solution to this problem yet. I've seen this suggestion to check the contents of the /etc/hosts/ file, and the contents of mine differ from the contents shown in that blog article. Specifically mine simply shows:

127.0.0.1       localhost
...

without the localhost.localdomain parts shown in the article. I'm stumped beyond this point. Any help will be much appreciated. Thank you!

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

烟─花易冷 2025-02-21 02:01:16

尝试运行此命令:

rabbitmqctl -n rabbit@localhost eval 'ssl:clear_pem_cache().'

Try running this command:

rabbitmqctl -n rabbit@localhost eval 'ssl:clear_pem_cache().'
~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文