diff options
| author | Luke Bakken <lbakken@pivotal.io> | 2020-05-18 16:42:49 -0700 |
|---|---|---|
| committer | Luke Bakken <lbakken@pivotal.io> | 2020-05-19 09:37:49 -0700 |
| commit | 5ea51050452ea45874e89166090cb825c1277656 (patch) | |
| tree | 3be011d2cbb9429815ea46ff8e31c48680472650 | |
| parent | 12d5f16547a1e9a18d6e144103ead2e8108d7e95 (diff) | |
| download | rabbitmq-server-git-5ea51050452ea45874e89166090cb825c1277656.tar.gz | |
Set credentials_obfuscation secret to cookie
Requires this PR and version 2.0.0 of the library:
https://github.com/rabbitmq/credentials-obfuscation/pull/5
| -rw-r--r-- | apps/rabbitmq_prelaunch/src/rabbit_prelaunch_conf.erl | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/apps/rabbitmq_prelaunch/src/rabbit_prelaunch_conf.erl b/apps/rabbitmq_prelaunch/src/rabbit_prelaunch_conf.erl index 5716919c85..dacc598677 100644 --- a/apps/rabbitmq_prelaunch/src/rabbit_prelaunch_conf.erl +++ b/apps/rabbitmq_prelaunch/src/rabbit_prelaunch_conf.erl @@ -67,6 +67,7 @@ setup(Context) -> config_advanced_file => undefined} end, ok = override_with_hard_coded_critical_config(), + ok = set_credentials_obfuscation_secret(), rabbit_log_prelaunch:debug( "Saving config state to application env: ~p", [State]), store_config_state(State). @@ -368,6 +369,12 @@ apply_app_env_vars(App, [{Var, Value} | Rest]) -> apply_app_env_vars(_, []) -> ok. +set_credentials_obfuscation_secret() -> + CookieBin = rabbit_data_coercion:to_binary(erlang:get_cookie()), + rabbit_log_prelaunch:debug( + "Setting credentials obfuscation secret to erlang cookie: ~p", [CookieBin]), + ok = credentials_obfuscation:set_secret(CookieBin). + %% ------------------------------------------------------------------- %% Config decryption. %% ------------------------------------------------------------------- |