# SSL Authentication to RabbitMQ

**URL:** <https://discuss.elastic.co/t/ssl-authentication-to-rabbitmq/114743>\
**Category:** Logstash\
**Created:** [January 9, 2018, 6:13pm UTC](https://discuss.elastic.co/t/ssl-authentication-to-rabbitmq/114743 "2018-01-09T18:13:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shane\_Eddy](https://avatars.discourse-cdn.com/v4/letter/s/e495f1/32.png) [@Shane\_Eddy](https://discuss.elastic.co/u/Shane_Eddy)\
**Post date:** [January 9, 2018, 6:13pm UTC](https://discuss.elastic.co/t/ssl-authentication-to-rabbitmq/114743/1 "2018-01-09T18:13:08Z")

</div>

We are trying to get our logstatsh rabbitmq plugin to authenticate to our RabbitMQ instance using PKI credentials. We've updated our logstash-rmq.config file with the following:

> ```
> HOST=localhost
> PORT=5671
> VHOST=/logstash
> SSL=true
> SSLCERTPATH=/etc/pki/nw/node/node.p12
> SSLCERTPWD=pwd
> EXCHANGE=app.exchange
> QUEUE=ls-audit
> AUTO_DELETE=true
> 
> ```

From our other rabbitMQ clients a similar configuration goes through a mutual SSL authentication and the CN on our identity certificate in the keystore maps to the account in RabbitMQ. For Logstash, it doesn't matter what is in our keystore, Rabbit is authenticating the connection as the Guest user. If we update the configuration to be something like:

> ```
> HOST=localhost
> PORT=5671
> VHOST=/logstash
> SSL=true
> SSLCERTPATH=/etc/pki/nw/node/node.p12
> SSLCERTPWD=pwd
> EXCHANGE=app.exchange
> QUEUE=ls-audit
> AUTO_DELETE=true
> USER=logstashpkiuser
> 
> ```

then we get an error because there is no password set. Is it possible to configure the plugin to use the identity in the keystore to authenticate to rabbit or is the SSL configuration simply intended to provide transport encryption not authentication?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 6, 2018, 6:13pm UTC](https://discuss.elastic.co/t/ssl-authentication-to-rabbitmq/114743/2 "2018-02-06T18:13:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.