Certificats pour RabbitMQ - Genetec Mission Control™ 2.13.2.0

Guide de déploiement de Genetec Mission Control™ 2.13.2.0

series
Genetec Mission Control™ 2.13.2.0
revised_modified
2020-05-04

Le programme d'installation de Genetec Mission Control™ intègre des certificats autosignés à utiliser avec RabbitMQ.

Fichier de configuration RabbitMQ

Par défaut, RabbitMQ utilise les certificats autosignés intégrés au programme d'installation de Genetec Mission Control™. Les informations de certificat sont disponibles dans C:/Program Files (x86)/Genetec/RabbitMQ/RabbitMQ.config :

%% to enable SSL for management console
    {listener,  [
        {port,    15671},
        {ssl,     true},                 
        {ssl_opts, [
	                {cacertfile, "C:/Program Files (x86)/Genetec/RabbitMQ/CACert.pem"},
		               {certfile,   "C:/Program Files (x86)/Genetec/RabbitMQ/Cert.pem"},
		               {keyfile,    "C:/Program Files (x86)/Genetec/RabbitMQ/Key.pem"},
			         {honor_cipher_order,   true},
			         {honor_ecc_order,      true},
			         {ciphers,  [
					            "ECDHE-ECDSA-AES256-GCM-SHA384",
					            "ECDHE-RSA-AES256-GCM-SHA384",
					            "ECDHE-ECDSA-AES256-SHA384",
					            "ECDHE-RSA-AES256-SHA384",
					            "ECDH-ECDSA-AES256-GCM-SHA384",
					            "ECDH-RSA-AES256-GCM-SHA384",
					            "ECDH-ECDSA-AES256-SHA384",
					            "ECDH-RSA-AES256-SHA384",
					            "DHE-RSA-AES256-GCM-SHA384",
					            "DHE-DSS-AES256-GCM-SHA384",
					            "DHE-RSA-AES256-SHA256",
					            "DHE-DSS-AES256-SHA256",
					            "ECDHE-ECDSA-AES128-GCM-SHA256",
					            "ECDHE-RSA-AES128-GCM-SHA256",
					            "ECDHE-ECDSA-AES128-SHA256",
					            "ECDHE-RSA-AES128-SHA256",
					            "ECDH-ECDSA-AES128-GCM-SHA256",
					            "ECDH-RSA-AES128-GCM-SHA256",
					            "ECDH-ECDSA-AES128-SHA256",
					            "ECDH-RSA-AES128-SHA256",
					            "DHE-RSA-AES128-GCM-SHA256",
					            "DHE-DSS-AES128-GCM-SHA256",
					            "DHE-RSA-AES128-SHA256",
					            "DHE-DSS-AES128-SHA256",
					            "ECDHE-ECDSA-AES256-SHA",
					            "ECDHE-RSA-AES256-SHA",
					            "DHE-RSA-AES256-SHA",
					            "DHE-DSS-AES256-SHA",
					            "ECDH-ECDSA-AES256-SHA",
					            "ECDH-RSA-AES256-SHA",
					            "ECDHE-ECDSA-AES128-SHA",
					            "ECDHE-RSA-AES128-SHA",
					            "DHE-RSA-AES128-SHA",
					            "DHE-DSS-AES128-SHA",
					            "ECDH-ECDSA-AES128-SHA",
					            "ECDH-RSA-AES128-SHA"
						        		        ]}]}]}