but maybe something is getting confused with whats a different argument to the mco command and so ARGV has some weird shit in it
ayaz joined the channel
aswen has quit
matchaw joined the channel
viq has quit
viq joined the channel
saurajeetd joined the channel
aswen joined the channel
saurajeetd has quit
jantman joined the channel
davewongillies has quit
jantman has quit
jantman joined the channel
matchaw has quit
matchaw joined the channel
FriedBob joined the channel
alcy has quit
jantman has quit
Bdawk joined the channel
ayaz has quit
jantman joined the channel
chitopunk joined the channel
mechanicalduck joined the channel
crazed_ is now known as crazed
mechanicalduck_ has quit
gmcwhistler joined the channel
whenry joined the channel
stresler joined the channel
Wolfspyre joined the channel
Wolfspyre has quit
Wolfspyre joined the channel
aswen has quit
kpease joined the channel
bosszaru joined the channel
jobewan joined the channel
_maes_ has quit
thumpba has quit
matchaw has quit
n3wbi3 joined the channel
_maes_ joined the channel
thumpba joined the channel
n3wbi3
if i want to connect to rabbitmq via ssl do i need to generate certs for MCollective and all of the nodes? The rabbitmq cluster is not using existing puppet certs unfortunatley
Volcane
reuse your pupet certs
n3wbi3
Volcane: that's not an option
the entire rabbitmq cluster was built with different certs and is already in production use
Volcane
did u check if it even bothers to verify them against a ca?
cos then you can just use any certs if it doesnt
n3wbi3
yes it checks
Volcane
either make more iwth its ca or share
you can share the tls cert between nodes, its not ideal - but its not used by mco for any purposes
its more what your goals are with encrypting the node <-> rabbitmq traffic
if sharing a cert aligns with your needs, rock on.
the certs mco use for SSL security plugin can come from a different ca - or use puppets - even while you're using different ones for tls
n3wbi3
ok thanks Volcane i'll see if i can get approval to have the mco traffic to rabbitmq be unencrypted. . . because it's not the reason we're encrypting anyway