RabbitMQ - Security and Operations
You want RabbitMQ to verify client certificates but allow clients without certificates to connect. Which combination of ssl_options settings achieves this?
You want RabbitMQ to verify client certificates but allow clients without certificates to connect. Which combination of ssl_options settings achieves this?
hard📝 Application Q9 of 15
Step-by-Step Solution
Solution:
Step 1: Understand verify_peer and fail_if_no_peer_cert
verify_peer checks client certs if provided; fail_if_no_peer_cert controls if missing certs cause rejection.Step 2: Allow clients without certs but verify if present
Set fail_if_no_peer_cert to false to allow missing certs, verify_peer to verify if cert is present.Final Answer:
ssl_options.verify = verify_peer, ssl_options.fail_if_no_peer_cert = false -> Option AQuick Check:
Verify peer but allow no certs [OK]
Quick Trick: Use fail_if_no_peer_cert false to allow missing certs with verify_peer [OK]
Common Mistakes:
MISTAKES- Setting fail_if_no_peer_cert true blocks clients without certs
- Using verify_none disables verification
- Confusing verify and fail_if_no_peer_cert roles
Master "Security and Operations" in RabbitMQ
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore RabbitMQ Quizzes