Split config snippets test

Move plugin-specific snippets to plugins.
Part of [#141481501]

4 files changed, 388 insertions, 1031 deletions

diff --git a/test/config_schema_SUITE.erl b/test/config_schema_SUITE.erl
index 09eb4678cd..4c143cd1aa 100644
--- a/test/config_schema_SUITE.erl
+++ b/test/config_schema_SUITE.erl
@@ -16,21 +16,11 @@
 
 -module(config_schema_SUITE).
 
--include_lib("common_test/include/ct.hrl").
--include_lib("amqp_client/include/amqp_client.hrl").
-
 -compile(export_all).
 
 all() ->
     [
-      {group, non_parallel_tests}
-    ].
-
-groups() ->
-    [
-      {non_parallel_tests, [], [
-          run_snippets
-        ]}
+        run_snippets
     ].
 
 %% -------------------------------------------------------------------
@@ -40,45 +30,18 @@ groups() ->
 init_per_suite(Config) ->
     rabbit_ct_helpers:log_environment(),
     Config1 = rabbit_ct_helpers:run_setup_steps(Config),
-    DepsDir = ?config(erlang_mk_depsdir, Config1),
-    Schemas = filelib:wildcard(DepsDir ++ "/*/priv/schema/*.schema"),
-    ct:pal("Schemas ~p~n", [Schemas]),
-    SchemaDir = filename:join(?config(data_dir, Config1), "schema"),
-    file:make_dir(SchemaDir),
-    ct:pal("Schema DIR ~p~n", [SchemaDir]),
-    [ copy_to(Schema, SchemaDir) || Schema <- Schemas ],
-    rabbit_ct_helpers:set_config(Config1, [{schema_dir, SchemaDir}]).
+    rabbit_ct_config_schema:init_schemas(rabbit, Config1).
 
-copy_to(File, Dir) ->
-    BaseName = filename:basename(File),
-    {ok, _} = file:copy(File, Dir ++ "/" ++ BaseName).
 
 end_per_suite(Config) ->
     rabbit_ct_helpers:run_teardown_steps(Config).
 
-init_per_group(_, Config) ->
-    Config.
-
-end_per_group(_, Config) ->
-    Config.
-
 init_per_testcase(Testcase, Config) ->
     rabbit_ct_helpers:testcase_started(Config, Testcase),
     Config1 = rabbit_ct_helpers:set_config(Config, [
         {rmq_nodename_suffix, Testcase}
       ]),
-    Config2 = case Testcase of
-        run_snippets ->
-            ResultsDir = filename:join(?config(priv_dir, Config1), "results"),
-            Snippets = filename:join(?config(data_dir, Config1),
-              "snippets.config"),
-            ok = file:make_dir(ResultsDir),
-            rabbit_ct_helpers:set_config(Config1, [
-                {results_dir, ResultsDir},
-                {conf_snippets, Snippets}
-              ])
-    end,
-    rabbit_ct_helpers:run_steps(Config2,
+    rabbit_ct_helpers:run_steps(Config1,
       rabbit_ct_broker_helpers:setup_steps() ++
       rabbit_ct_client_helpers:setup_steps()).
 
@@ -93,70 +56,9 @@ end_per_testcase(Testcase, Config) ->
 %% -------------------------------------------------------------------
 
 run_snippets(Config) ->
-    passed = rabbit_ct_broker_helpers:rpc(Config, 0,
+    ok = rabbit_ct_broker_helpers:rpc(Config, 0,
       ?MODULE, run_snippets1, [Config]).
 
 run_snippets1(Config) ->
-    {ok, [Snippets]} = file:consult(?config(conf_snippets, Config)),
-    lists:map(
-        fun({N, S, C, P})    -> ok = test_snippet(Config, {snippet_id(N), S, []}, C, P);
-           ({N, S, A, C, P}) -> ok = test_snippet(Config, {snippet_id(N), S, A},  C, P)
-        end,
-        Snippets),
-    passed.
-
-snippet_id(N) when is_integer(N) ->
-    integer_to_list(N);
-snippet_id(F) when is_float(F) ->
-    float_to_list(F);
-snippet_id(A) when is_atom(A) ->
-    atom_to_list(A);
-snippet_id(L) when is_list(L) ->
-    L.
-
-test_snippet(Config, Snippet, Expected, _Plugins) ->
-    {ConfFile, AdvancedFile} = write_snippet(Config, Snippet),
-    {ok, GeneratedFile} = generate_config(Config, ConfFile, AdvancedFile),
-    {ok, [Generated]} = file:consult(GeneratedFile),
-    Gen = deepsort(Generated),
-    Exp = deepsort(Expected),
-    case Exp of
-        Gen -> ok;
-        _         ->
-            error({config_mismatch, Snippet, Exp, Gen})
-    end.
-
-write_snippet(Config, {Name, Conf, Advanced}) ->
-    ResultsDir = ?config(results_dir, Config),
-    file:make_dir(filename:join(ResultsDir, Name)),
-    ConfFile = filename:join([ResultsDir, Name, "config.conf"]),
-    AdvancedFile = filename:join([ResultsDir, Name, "advanced.config"]),
-
-    file:write_file(ConfFile, Conf),
-    rabbit_file:write_term_file(AdvancedFile, [Advanced]),
-    {ConfFile, AdvancedFile}.
-
-generate_config(Config, ConfFile, AdvancedFile) ->
-    SchemaDir = ?config(schema_dir, Config),
-    ResultsDir = ?config(results_dir, Config),
-    Rabbitmqctl = ?config(rabbitmqctl_cmd, Config),
-    ScriptDir = filename:dirname(Rabbitmqctl),
-    ct:pal("ConfFile=~p ScriptDir=~p SchemaDir=~p AdvancedFile=~p", [ConfFile, ScriptDir, SchemaDir, AdvancedFile]),
-    rabbit_config:generate_config_file([ConfFile], ResultsDir, ScriptDir,
-                                       SchemaDir, AdvancedFile).
-
-deepsort(List) ->
-    case is_proplist(List) of
-        true ->
-            lists:keysort(1, lists:map(fun({K, V}) -> {K, deepsort(V)};
-                                          (V) -> V end,
-                                       List));
-        false ->
-            case is_list(List) of
-                true  -> lists:sort(List);
-                false -> List
-            end
-    end.
+    rabbit_ct_config_schema:run_snippets(Config).
 
-is_proplist([{_Key, _Val}|_] = List) -> lists:all(fun({_K, _V}) -> true; (_) -> false end, List);
-is_proplist(_) -> false.
diff --git a/test/config_schema_SUITE_data/rabbit-mgmt/access.log b/test/config_schema_SUITE_data/rabbit-mgmt/access.log
deleted file mode 100644
index e69de29bb2..0000000000
--- a/test/config_schema_SUITE_data/rabbit-mgmt/access.log
+++ /dev/null
diff --git a/test/config_schema_SUITE_data/rabbit.snippets b/test/config_schema_SUITE_data/rabbit.snippets
new file mode 100644
index 0000000000..b527b816b1
--- /dev/null
+++ b/test/config_schema_SUITE_data/rabbit.snippets
@@ -0,0 +1,383 @@
+[{internal_auth_backend,
+  "auth_backends.1 = internal",
+  [{rabbit,[{auth_backends,[rabbit_auth_backend_internal]}]}],
+  []},
+ {ldap_auth_backend,
+  "auth_backends.1 = ldap",
+  [{rabbit,[{auth_backends,[rabbit_auth_backend_ldap]}]}],
+  []},
+ {multiple_auth_backends,
+ "auth_backends.1 = ldap
+auth_backends.2 = internal",
+  [{rabbit,
+       [{auth_backends,
+            [rabbit_auth_backend_ldap,rabbit_auth_backend_internal]}]}],
+  []},
+ {full_name_auth_backend,
+  "auth_backends.1 = ldap
+# uses module name instead of a short alias, \"http\"
+auth_backends.2 = rabbit_auth_backend_http",
+  [{rabbit,
+       [{auth_backends,[rabbit_auth_backend_ldap,rabbit_auth_backend_http]}]}],
+  []},
+ {third_party_auth_backend,
+  "auth_backends.1.authn = internal
+# uses module name because this backend is from a 3rd party
+auth_backends.1.authz = rabbit_auth_backend_ip_range",
+  [{rabbit,
+       [{auth_backends,
+            [{rabbit_auth_backend_internal,rabbit_auth_backend_ip_range}]}]}],
+  []},
+ {authn_authz_backend,
+ "auth_backends.1.authn = ldap
+auth_backends.1.authz = internal",
+  [{rabbit,
+       [{auth_backends,
+            [{rabbit_auth_backend_ldap,rabbit_auth_backend_internal}]}]}],
+  []},
+ {authn_authz_multiple_backends,
+  "auth_backends.1.authn = ldap
+auth_backends.1.authz = internal
+auth_backends.2       = internal",
+  [{rabbit,
+       [{auth_backends,
+            [{rabbit_auth_backend_ldap,rabbit_auth_backend_internal},
+             rabbit_auth_backend_internal]}]}],
+  []},
+ {authn_backend_only,
+  "auth_backends.1.authn = ldap",
+  [{rabbit,
+       [{auth_backends,
+            [{rabbit_auth_backend_ldap,rabbit_auth_backend_ldap}]}]}],
+  []},
+ {ssl_options,
+  "ssl_options.cacertfile          = test/config_schema_SUITE_data/certs/cacert.pem
+ssl_options.certfile             = test/config_schema_SUITE_data/certs/cert.pem
+ssl_options.keyfile              = test/config_schema_SUITE_data/certs/key.pem
+ssl_options.verify               = verify_peer
+ssl_options.fail_if_no_peer_cert = true",
+  [{rabbit,
+       [{ssl_options,
+            [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
+             {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
+             {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
+             {verify,verify_peer},
+             {fail_if_no_peer_cert,true}]}]}],
+  []},
+ {tcp_listener,
+  "listeners.tcp.default = 5673",
+    [{rabbit,[{tcp_listeners,[5673]}]}],[]},
+ {ssl_listener,
+  "listeners.ssl = none",[{rabbit,[{ssl_listeners,[]}]}],[]},
+ {num_acceptors,
+  "num_acceptors.ssl = 1",[{rabbit,[{num_ssl_acceptors,1}]}],[]},
+ {default_user_settings,
+  "default_user = guest
+default_pass = guest
+default_user_tags.administrator = true
+default_permissions.configure = .*
+default_permissions.read = .*
+default_permissions.write = .*",
+  [{rabbit,
+       [{default_user,<<"guest">>},
+        {default_pass,<<"guest">>},
+        {default_user_tags,[administrator]},
+        {default_permissions,[<<".*">>,<<".*">>,<<".*">>]}]}],
+  []},
+ {autocluster,
+  "autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
+autocluster.classic_config.nodes.peer1 = rabbit@hostname1
+autocluster.classic_config.nodes.peer2 = rabbit@hostname2
+autocluster.node_type = disc",
+  [{rabbit,
+       [{autocluster,
+            [{peer_discovery_backend,rabbit_peer_discovery_classic_config},
+             {node_type,disc}]},
+        {cluster_nodes,{[rabbit@hostname2,rabbit@hostname1],disc}}]}],
+  []},
+ {autocluster_disK,
+  "autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
+   autocluster.classic_config.nodes.peer1 = rabbit@hostname1
+   autocluster.classic_config.nodes.peer2 = rabbit@hostname2
+   autocluster.node_type = disk",
+  [{rabbit,
+       [{autocluster,
+            [{peer_discovery_backend,rabbit_peer_discovery_classic_config},
+             {node_type,disc}]},
+        {cluster_nodes,{[rabbit@hostname2,rabbit@hostname1],disc}}]}],
+  []},
+ {autocluster_ram_ignored,
+  "autocluster.node_type = ram",[],[]},
+ {tcp_listen_options,
+  "tcp_listen_options.backlog = 128
+tcp_listen_options.nodelay = true
+tcp_listen_options.exit_on_close = false",
+  [{rabbit,
+       [{tcp_listen_options,
+            [{backlog,128},{nodelay,true},{exit_on_close,false}]}]}],
+  []},
+ {vm_memory_watermark_absolute,
+  "vm_memory_high_watermark.absolute = 1073741824",
+  [{rabbit,[{vm_memory_high_watermark,{absolute,1073741824}}]}],
+  []},
+ {vm_memory_watermark_absolute_units,
+  "vm_memory_high_watermark.absolute = 1024MB",
+  [{rabbit,[{vm_memory_high_watermark,{absolute,"1024MB"}}]}],
+  []},
+ {vm_memory_watermark_paging_ratio,
+  "vm_memory_high_watermark_paging_ratio = 0.75
+   vm_memory_high_watermark.relative = 0.4",
+  [{rabbit,
+       [{vm_memory_high_watermark_paging_ratio,0.75},
+        {vm_memory_high_watermark,0.4}]}],
+  []},
+ {listeners_tcp_ip,
+  "listeners.tcp.1 = 192.168.1.99:5672",
+  [{rabbit,[{tcp_listeners,[{"192.168.1.99",5672}]}]}],
+  []},
+ {listeners_tcp_ip_multiple,
+  "listeners.tcp.1 = 127.0.0.1:5672
+   listeners.tcp.2 = ::1:5672",
+  [{rabbit,[{tcp_listeners,[{"127.0.0.1",5672},{"::1",5672}]}]}],
+  []},
+ {listeners_tcp_ip_all,"listeners.tcp.1 = :::5672",
+  [{rabbit,[{tcp_listeners,[{"::",5672}]}]}],
+  []},
+ {listeners_tcp_ipv6,
+  "listeners.tcp.1 = fe80::2acf:e9ff:fe17:f97b:5672",
+  [{rabbit,[{tcp_listeners,[{"fe80::2acf:e9ff:fe17:f97b",5672}]}]}],
+  []},
+ {tcp_options_sndbuf,
+  "tcp_listen_options.backlog = 128
+   tcp_listen_options.nodelay = true
+   tcp_listen_options.sndbuf = 196608
+   tcp_listen_options.recbuf = 196608",
+  [{rabbit,
+       [{tcp_listen_options,
+            [{backlog,128},{nodelay,true},{sndbuf,196608},{recbuf,196608}]}]}],
+  []},
+ {tcp_listen_options_nodelay_with_kernel,
+  "tcp_listen_options.backlog = 4096
+   tcp_listen_options.nodelay = true",
+  [{kernel,
+       [{inet_default_connect_options,[{nodelay,true}]},
+        {inet_default_listen_options,[{nodelay,true}]}]}],
+  [{kernel,
+       [{inet_default_connect_options,[{nodelay,true}]},
+        {inet_default_listen_options,[{nodelay,true}]}]},
+   {rabbit,[{tcp_listen_options,[{backlog,4096},{nodelay,true}]}]}],
+  []},
+ {tcp_listen_options_nodelay,
+  "tcp_listen_options.backlog = 4096
+   tcp_listen_options.nodelay = true",
+  [{rabbit,[{tcp_listen_options,[{backlog,4096},{nodelay,true}]}]}],
+  []},
+ {ssl_handshake_timeout,
+  "ssl_handshake_timeout = 10000",
+  [{rabbit,[{ssl_handshake_timeout,10000}]}],
+  []},
+ {cluster_partition_handling_pause_if_all_down,
+  "cluster_partition_handling = pause_if_all_down
+
+   ## Recover strategy. Can be either 'autoheal' or 'ignore'
+   cluster_partition_handling.pause_if_all_down.recover = ignore
+
+   ## Node names to check
+   cluster_partition_handling.pause_if_all_down.nodes.1 = rabbit@myhost1
+   cluster_partition_handling.pause_if_all_down.nodes.2 = rabbit@myhost2",
+  [{rabbit,
+       [{cluster_partition_handling,
+            {pause_if_all_down,[rabbit@myhost2,rabbit@myhost1],ignore}}]}],
+  []},
+ {cluster_partition_handling_autoheal,
+  "cluster_partition_handling = autoheal",
+  [{rabbit,[{cluster_partition_handling,autoheal}]}],
+  []},
+ {password_hashing,
+  "password_hashing_module = rabbit_password_hashing_sha512",
+  [{rabbit,[{password_hashing_module,rabbit_password_hashing_sha512}]}],
+  []},
+ {ssl_options_verify_peer,
+  "listeners.ssl.1 = 5671
+   ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
+   ssl_options.certfile = test/config_schema_SUITE_data/certs/cert.pem
+   ssl_options.keyfile = test/config_schema_SUITE_data/certs/key.pem
+   ssl_options.verify = verify_peer
+   ssl_options.fail_if_no_peer_cert = false",
+  [{rabbit,
+       [{ssl_listeners,[5671]},
+        {ssl_options,
+            [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
+             {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
+             {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
+             {verify,verify_peer},
+             {fail_if_no_peer_cert,false}]}]}],
+  []},
+ {ssl_options_password,
+  "listeners.ssl.1 = 5671
+   ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
+   ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
+   ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
+   ssl_options.password   = t0p$3kRe7",
+  [{rabbit,
+       [{ssl_listeners,[5671]},
+        {ssl_options,
+            [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
+             {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
+             {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
+             {password,"t0p$3kRe7"}]}]}],
+  []},
+ {ssl_options_tls_ver_old,
+  "listeners.ssl.1 = 5671
+   ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
+   ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
+   ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
+   ssl_options.versions.tls1_2 = tlsv1.2
+   ssl_options.versions.tls1_1 = tlsv1.1
+   ssl_options.versions.tls1   = tlsv1",
+  [{ssl,[{versions,['tlsv1.2','tlsv1.1',tlsv1]}]}],
+  [{ssl,[{versions,['tlsv1.2','tlsv1.1',tlsv1]}]},
+   {rabbit,
+       [{ssl_listeners,[5671]},
+        {ssl_options,
+            [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
+             {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
+             {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
+             {versions,['tlsv1.2','tlsv1.1',tlsv1]}]}]}],
+  []},
+ {ssl_options_tls_ver_new,
+  "listeners.ssl.1 = 5671
+   ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
+   ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
+   ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
+   ssl_options.versions.tls1_2 = tlsv1.2
+   ssl_options.versions.tls1_1 = tlsv1.1",
+  [{ssl,[{versions,['tlsv1.2','tlsv1.1']}]}],
+  [{ssl,[{versions,['tlsv1.2','tlsv1.1']}]},
+   {rabbit,
+       [{ssl_listeners,[5671]},
+        {ssl_options,
+            [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
+             {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
+             {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
+             {versions,['tlsv1.2','tlsv1.1']}]}]}],
+  []},
+ {ssl_options_allow_poodle,
+  "listeners.ssl.1 = 5671
+   ssl_allow_poodle_attack = true
+   ssl_options.cacertfile  = test/config_schema_SUITE_data/certs/cacert.pem
+   ssl_options.certfile    = test/config_schema_SUITE_data/certs/cert.pem
+   ssl_options.keyfile     = test/config_schema_SUITE_data/certs/key.pem
+   ssl_options.verify      = verify_peer
+   ssl_options.fail_if_no_peer_cert = false",
+  [{rabbit,
+       [{ssl_listeners,[5671]},
+        {ssl_allow_poodle_attack,true},
+        {ssl_options,
+            [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
+             {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
+             {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
+             {verify,verify_peer},
+             {fail_if_no_peer_cert,false}]}]}],
+  []},
+ {ssl_options_depth,
+  "listeners.ssl.1 = 5671
+   ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
+   ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
+   ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
+   ssl_options.depth      = 2
+   ssl_options.verify     = verify_peer
+   ssl_options.fail_if_no_peer_cert = false",
+  [{rabbit,
+       [{ssl_listeners,[5671]},
+        {ssl_options,
+            [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
+             {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
+             {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
+             {depth,2},
+             {verify,verify_peer},
+             {fail_if_no_peer_cert,false}]}]}],
+  []},
+ {ssl_cert_login_from,
+  "ssl_cert_login_from = common_name",
+  [{rabbit,[{ssl_cert_login_from,common_name}]}],
+  []},
+ {tcp_listen_options_linger_on,
+  "tcp_listen_options.linger.on = true
+   tcp_listen_options.linger.timeout = 100",
+  [{rabbit,[{tcp_listen_options,[{linger,{true,100}}]}]}],
+  []},
+ {tcp_listen_options_linger_off,
+  "tcp_listen_options.linger.on = false
+   tcp_listen_options.linger.timeout = 100",
+  [{rabbit,[{tcp_listen_options,[{linger,{false,100}}]}]}],
+  []},
+ {tcp_listen_options_linger_on_notimeout,
+  "tcp_listen_options.linger.on = true",
+  [{rabbit,[{tcp_listen_options,[{linger,{true,0}}]}]}],
+  []},
+ {tcp_listen_options_linger_timeout,
+  "tcp_listen_options.linger.timeout = 100",
+  [{rabbit,[{tcp_listen_options,[{linger,{false,100}}]}]}],
+  []},
+ {autocluster_dns,
+  "autocluster.peer_discovery_backend = rabbit_peer_discovery_dns
+   autocluster.dns.hostname = 192.168.0.2.xip.io
+   autocluster.node_type = disc",
+  [{rabbit,
+       [{autocluster,
+            [{peer_discovery_dns,[{hostname,<<"192.168.0.2.xip.io">>}]},
+             {peer_discovery_backend,rabbit_peer_discovery_dns},
+             {node_type,disc}]}]}],
+  []},
+ {autocluster_classic,
+  "autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
+   autocluster.node_type = disc",
+  [{rabbit,
+       [{autocluster,
+            [{peer_discovery_backend,rabbit_peer_discovery_classic_config},
+             {node_type,disc}]}]}],
+  []},
+ {autocluster_classic_ram,
+  "autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
+   autocluster.node_type = ram",
+  [{rabbit,
+       [{autocluster,
+            [{peer_discovery_backend,rabbit_peer_discovery_classic_config},
+             {node_type,ram}]}]}],
+  []},
+ {background_gc_enabled,
+  "background_gc_enabled = true
+   background_gc_target_interval = 30000",
+  [{rabbit,
+       [{background_gc_enabled,true},{background_gc_target_interval,30000}]}],
+  []},
+ {background_gc_disabled,
+  "background_gc_enabled = false
+   background_gc_target_interval = 30000",
+  [{rabbit,
+       [{background_gc_enabled,false},{background_gc_target_interval,30000}]}],
+  []},
+ {credential_validator_length,
+  "credential_validator.validation_backend = rabbit_credential_validator_min_password_length
+credential_validator.min_length = 10",
+  [{rabbit,
+       [{credential_validator,
+            [{validation_backend,
+                 rabbit_credential_validator_min_password_length},
+             {min_length,10}]}]}],
+  []},
+ {credential_validator_regexp,
+  "credential_validator.validation_backend = rabbit_credential_validator_password_regexp
+credential_validator.regexp = ^abc\\d+",
+  [{rabbit,
+       [{credential_validator,
+            [{validation_backend,rabbit_credential_validator_password_regexp},
+             {regexp,"^abc\\d+"}]}]}],
+  []},
+ {proxy_protocol_on,
+  "proxy_protocol = true",
+  [{rabbit,[{proxy_protocol,true}]}],[]},
+ {proxy_protocol_off,
+  "proxy_protocol = false",
+  [{rabbit,[{proxy_protocol,false}]}],[]}].
diff --git a/test/config_schema_SUITE_data/snippets.config b/test/config_schema_SUITE_data/snippets.config
deleted file mode 100644
index 150ccfac5c..0000000000
--- a/test/config_schema_SUITE_data/snippets.config
+++ /dev/null
@@ -1,928 +0,0 @@
-[
-{1,
-"auth_backends.1 = internal",
-[{rabbit, [{auth_backends, [rabbit_auth_backend_internal]}]}],[]}
-,
-{2,
-"auth_backends.1 = ldap",
-[{rabbit, [{auth_backends, [rabbit_auth_backend_ldap]}]}],[]}
-,
-
-{3,
-"auth_backends.1 = ldap
-auth_backends.2 = internal",
-
-[{rabbit, [
-             {auth_backends, [rabbit_auth_backend_ldap, rabbit_auth_backend_internal]}
-           ]
- }],[]}
-
-,
-
-{4,
-"auth_backends.1 = ldap
-# uses module name instead of a short alias, \"http\"
-auth_backends.2 = rabbit_auth_backend_http",
-
-[{rabbit, [{auth_backends, [rabbit_auth_backend_ldap, rabbit_auth_backend_http]}]}],[]}
-
-,
-
-{5,
-"auth_backends.1.authn = internal
-# uses module name because this backend is from a 3rd party
-auth_backends.1.authz = rabbit_auth_backend_ip_range",
-[{rabbit, [{auth_backends, [{rabbit_auth_backend_internal, rabbit_auth_backend_ip_range}]}]}],[]}
-,
-{6,
-"auth_backends.1.authn = ldap
-auth_backends.1.authz = internal",
-[{rabbit, [{auth_backends, [{rabbit_auth_backend_ldap, rabbit_auth_backend_internal}]}]}],[]}
-,
-
-{7,
-"auth_backends.1.authn = ldap
-auth_backends.1.authz = internal
-auth_backends.2       = internal",
-[{rabbit, [
-             {auth_backends, [{rabbit_auth_backend_ldap, rabbit_auth_backend_internal},
-                              rabbit_auth_backend_internal]}
-           ]
-  }],[]}
-,
-{7.1,
-"auth_backends.1.authn = ldap",
-[{rabbit, [
-             {auth_backends, [{rabbit_auth_backend_ldap, rabbit_auth_backend_ldap}]}
-           ]
-  }],[]},
-
-{8,
-"ssl_options.cacertfile          = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile             = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile              = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.verify               = verify_peer
-ssl_options.fail_if_no_peer_cert = true",
-[
-    {rabbit, [{ssl_options, [{cacertfile,           "test/config_schema_SUITE_data/certs/cacert.pem"},
-                             {certfile,             "test/config_schema_SUITE_data/certs/cert.pem"},
-                             {keyfile,              "test/config_schema_SUITE_data/certs/key.pem"},
-                             {verify,               verify_peer},
-                             {fail_if_no_peer_cert, true}]}
-  ]}],[]}
-,
-
-{9,
-"listeners.tcp.default = 5673",
-[{rabbit, [{tcp_listeners, [5673]}]}],[]}
-,
-
-{10,
-"listeners.ssl = none",
-[{rabbit, [{ssl_listeners, []}]}],[]}
-,
-{11,
-"num_acceptors.ssl = 1",
-[{rabbit, [{num_ssl_acceptors, 1}]}],[]}
-,
-{12,
-"default_user = guest
-default_pass = guest
-default_user_tags.administrator = true
-default_permissions.configure = .*
-default_permissions.read = .*
-default_permissions.write = .*",
-[{rabbit, [
-{default_user, <<"guest">>},
-{default_pass, <<"guest">>},
-{default_user_tags, [administrator]},
-{default_permissions, [<<".*">>, <<".*">>, <<".*">>]}]}],[]}
-,
-{13,
-"autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
-autocluster.classic_config.nodes.peer1 = rabbit@hostname1
-autocluster.classic_config.nodes.peer2 = rabbit@hostname2
-autocluster.node_type = disc",
-[{rabbit, [
-    {autocluster,   [{peer_discovery_backend, rabbit_peer_discovery_classic_config},
-                     {node_type, disc}]},
-    {cluster_nodes, {[rabbit@hostname2,rabbit@hostname1], disc}}
-]}],[]}
-,
-{13.1,
-"autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
-autocluster.classic_config.nodes.peer1 = rabbit@hostname1
-autocluster.classic_config.nodes.peer2 = rabbit@hostname2
-autocluster.node_type = disk",
-[{rabbit, [
-    {autocluster,   [{peer_discovery_backend, rabbit_peer_discovery_classic_config},
-                     {node_type, disc}]},
-    {cluster_nodes, {[rabbit@hostname2,rabbit@hostname1], disc}}
-]}],[]}
-,
-{13.2,
-"autocluster.node_type = ram",
-[],[]}
-,
-{14,
-"tcp_listen_options.backlog = 128
-tcp_listen_options.nodelay = true
-tcp_listen_options.exit_on_close = false",
-[{rabbit, [{tcp_listen_options, [{backlog,       128},
-{nodelay,       true},
-{exit_on_close, false}]}]}],[]}
-,
-{15,
-"auth_backends.1.authn = ldap
-auth_backends.1.authz = internal
-auth_backends.2 = internal",
-[{rabbit,[{auth_backends, [{rabbit_auth_backend_ldap, rabbit_auth_backend_internal},
-                                                      rabbit_auth_backend_internal]}]}],[]}
-,
-{16.1,
-"auth_ldap.servers.1 = DC1.domain.com
- auth_ldap.servers.2 = DC1.eng.domain.com",
-[{rabbitmq_auth_backend_ldap, [{servers, ["DC1.domain.com", "DC1.eng.domain.com"]}]}],
-[rabbitmq_auth_backend_ldap]}
-,
-{16.2,
-"auth_ldap.servers.1 = hostname1
- auth_ldap.servers.2 = hostname2",
-[{rabbitmq_auth_backend_ldap, [{servers, ["hostname1", "hostname2"]}]}],
-[rabbitmq_auth_backend_ldap]}
-,
-{17,
-"auth_ldap.dn_lookup_attribute = userPrincipalName
-auth_ldap.dn_lookup_base = DC=gopivotal,DC=com
-auth_ldap.dn_lookup_bind = as_user",
-[{rabbitmq_auth_backend_ldap, [{dn_lookup_attribute,   "userPrincipalName"},
-{dn_lookup_base,        "DC=gopivotal,DC=com"},
-{dn_lookup_bind, as_user}]}],
-[rabbitmq_auth_backend_ldap]}
-,
-{18,
-"auth_ldap.dn_lookup_bind.user_dn = username
-auth_ldap.dn_lookup_bind.password = password",
-[{rabbitmq_auth_backend_ldap, [
-{dn_lookup_bind, {"username", "password"}}]}],
-[rabbitmq_auth_backend_ldap]}
-,
-{19,
-"auth_ldap.other_bind = anon",
-[{rabbitmq_auth_backend_ldap, [{other_bind, anon}]}],
-[rabbitmq_auth_backend_ldap]}
-,
-{20,
-"auth_ldap.other_bind = as_user",
-[{rabbitmq_auth_backend_ldap, [{other_bind, as_user}]}],
-[rabbitmq_auth_backend_ldap]}
-,
-{21,
-"auth_ldap.other_bind.user_dn = username
-auth_ldap.other_bind.password = password",
-[{rabbitmq_auth_backend_ldap, [{other_bind, {"username", "password"}}]}],
-[rabbitmq_auth_backend_ldap]}
-,
-{22,
-"listeners.tcp.default = 5672
-collect_statistics_interval = 10000
-management.http_log_dir = test/config_schema_SUITE_data/rabbit-mgmt
-management.rates_mode = basic",
-[{rabbit,                    [ {tcp_listeners,               [5672]},
-                                {collect_statistics_interval, 10000}]},
-  {rabbitmq_management,       [ {http_log_dir,  "test/config_schema_SUITE_data/rabbit-mgmt"},
-                                {rates_mode,    basic}]}
-],
-[rabbitmq_management]}
-,
-{23,
-"management.listener.port = 12345",
-[{rabbitmq_management, [{listener, [{port, 12345}]}]}],
-[rabbitmq_management]}
-,
-{24,
-"management.listener.port = 15671
-management.listener.ssl = true
-management.listener.ssl_opts.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-management.listener.ssl_opts.certfile = test/config_schema_SUITE_data/certs/cert.pem
-management.listener.ssl_opts.keyfile = test/config_schema_SUITE_data/certs/key.pem",
-[{rabbitmq_management,
-  [{listener, [{port,     15671},
-               {ssl,      true},
-               {ssl_opts, [{cacertfile, "test/config_schema_SUITE_data/certs/cacert.pem"},
-                           {certfile,   "test/config_schema_SUITE_data/certs/cert.pem"},
-                           {keyfile,    "test/config_schema_SUITE_data/certs/key.pem"}]}
-              ]}
-  ]}
-],
-[rabbitmq_management]}
-,
-{25,
-"management.sample_retention_policies.global.minute  = 5
-management.sample_retention_policies.global.hour    = 60
-management.sample_retention_policies.global.day = 1200
-
-management.sample_retention_policies.basic.minute = 5
-management.sample_retention_policies.basic.hour   = 60
-
-management.sample_retention_policies.detailed.10 = 5",
-[{rabbitmq_management,[
-    {sample_retention_policies,
-    %% List of {MaxAgeInSeconds, SampleEveryNSeconds}
-        [{global,   [{60, 5}, {3600, 60}, {86400, 1200}]},
-         {basic,    [{60, 5}, {3600, 60}]},
-         {detailed, [{10, 5}]}]}
-]}],
-[rabbitmq_management]}
-,
-{26,
-"vm_memory_high_watermark.absolute = 1073741824",
-[{rabbit, [{vm_memory_high_watermark, {absolute, 1073741824}}]}],[]}
-,
-{27,
-"vm_memory_high_watermark.absolute = 1024MB",
-[{rabbit, [{vm_memory_high_watermark, {absolute, "1024MB"}}]}],[]}
-,
-{28,
-"vm_memory_high_watermark_paging_ratio = 0.75
-vm_memory_high_watermark.relative = 0.4",
-[{rabbit, [{vm_memory_high_watermark_paging_ratio, 0.75},
-          {vm_memory_high_watermark, 0.4}]}],[]}
-,
-{29,
-"listeners.tcp.default = 5672
-mqtt.default_user     = guest
-mqtt.default_pass     = guest
-mqtt.allow_anonymous  = true
-mqtt.vhost            = /
-mqtt.exchange         = amq.topic
-mqtt.subscription_ttl = 1800000
-mqtt.prefetch         = 10
-mqtt.listeners.ssl    = none
-## Default MQTT with TLS port is 8883
-# mqtt.listeners.ssl.default = 8883
-mqtt.listeners.tcp.default = 1883
-mqtt.tcp_listen_options.backlog = 128
-mqtt.tcp_listen_options.nodelay = true
-mqtt.proxy_protocol = false",
-[{rabbit,        [{tcp_listeners,    [5672]}]},
-     {rabbitmq_mqtt, [{default_user,     <<"guest">>},
-                      {default_pass,     <<"guest">>},
-                      {allow_anonymous,  true},
-                      {vhost,            <<"/">>},
-                      {exchange,         <<"amq.topic">>},
-                      {subscription_ttl, 1800000},
-                      {prefetch,         10},
-                      {ssl_listeners,    []},
-                      %% Default MQTT with TLS port is 8883
-                      %% {ssl_listeners,    [8883]}
-                      {tcp_listeners,    [1883]},
-                      {tcp_listen_options, [{backlog,   128},
-                                            {nodelay,   true}]},
-                      {proxy_protocol, false}]}
-    ],
-[rabbitmq_mqtt]}
-,
-{30,
-"ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.verify     = verify_peer
-ssl_options.fail_if_no_peer_cert  = true
-
-mqtt.listeners.ssl.default = 8883
-mqtt.listeners.tcp.default = 1883",
-[{rabbit,        [
-                      {ssl_options, [{cacertfile, "test/config_schema_SUITE_data/certs/cacert.pem"},
-                                     {certfile,   "test/config_schema_SUITE_data/certs/cert.pem"},
-                                     {keyfile,    "test/config_schema_SUITE_data/certs/key.pem"},
-                                     {verify,     verify_peer},
-                                     {fail_if_no_peer_cert, true}]}
-                     ]},
-     {rabbitmq_mqtt, [
-                      {ssl_listeners,    [8883]},
-                      {tcp_listeners,    [1883]}
-                      ]}
-    ],
-[rabbitmq_mqtt]}
-,
-{31,
-"mqtt.ssl_cert_login = true",
-[{rabbitmq_mqtt, [{ssl_cert_login, true}]}], [rabbitmq_mqtt]}
-,
-
-{32,
-"ssl_cert_login_from = common_name",
-[{rabbit, [{ssl_cert_login_from, common_name}]}], [rabbitmq_mqtt]}
-,
-
-
-{33,
-"listeners.tcp.default = 5672
-mqtt.default_user     = guest
-mqtt.default_pass     = guest
-mqtt.allow_anonymous  = true
-mqtt.vhost            = /
-mqtt.exchange         = amq.topic
-mqtt.subscription_ttl = undefined
-mqtt.prefetch         = 10
-mqtt.proxy_protocol = true",
-[{rabbit,        [{tcp_listeners,    [5672]}]},
-     {rabbitmq_mqtt, [{default_user,     <<"guest">>},
-                      {default_pass,     <<"guest">>},
-                      {allow_anonymous,  true},
-                      {vhost,            <<"/">>},
-                      {exchange,         <<"amq.topic">>},
-                      {subscription_ttl, undefined},
-                      {prefetch,         10},
-                      {proxy_protocol,   true}]}
-    ],
-[rabbitmq_mqtt]}
-,
-{34,
-"mqtt.default_user     = guest
-mqtt.default_pass     = guest
-mqtt.allow_anonymous  = true
-mqtt.vhost            = /
-mqtt.exchange         = amq.topic
-mqtt.subscription_ttl = 1800000
-mqtt.prefetch         = 10
-## use DETS (disk-based) store for retained messages
-mqtt.retained_message_store = rabbit_mqtt_retained_msg_store_dets
-## only used by DETS store
-mqtt.retained_message_store_dets_sync_interval = 2000
-
-mqtt.listeners.ssl = none
-mqtt.listeners.tcp.default = 1883",
-[{rabbitmq_mqtt, [{default_user,     <<"guest">>},
-                      {default_pass,     <<"guest">>},
-                      {allow_anonymous,  true},
-                      {vhost,            <<"/">>},
-                      {exchange,         <<"amq.topic">>},
-                      {subscription_ttl, 1800000},
-                      {prefetch,         10},
-                      %% use DETS (disk-based) store for retained messages
-                      {retained_message_store, rabbit_mqtt_retained_msg_store_dets},
-                      %% only used by DETS store
-                      {retained_message_store_dets_sync_interval, 2000},
-                      {ssl_listeners,    []},
-                      {tcp_listeners,    [1883]}]}
-    ],
-[rabbitmq_mqtt]}
-,
-
-{35,
-"listeners.tcp.1 = 192.168.1.99:5672",
-[
-  {rabbit, [
-    {tcp_listeners, [{"192.168.1.99", 5672}]}
-  ]}
-], []}
-,
-{36,
-"listeners.tcp.1 = 127.0.0.1:5672
-listeners.tcp.2 = ::1:5672",
-[
-  {rabbit, [
-    {tcp_listeners, [{"127.0.0.1", 5672},
-                     {"::1",       5672}]}
-  ]}
-], []}
-,
-{37,
-"listeners.tcp.1 = :::5672",
-[
-  {rabbit, [
-    {tcp_listeners, [{"::",       5672}]}
-  ]}
-], []}
-,
-{38,
-"listeners.tcp.1 = 192.168.1.99:5672",
-[
-  {rabbit, [
-    {tcp_listeners, [{"192.168.1.99", 5672}]}
-  ]}
-], []}
-,
-{39,
-"listeners.tcp.1 = fe80::2acf:e9ff:fe17:f97b:5672",
-[
-  {rabbit, [
-    {tcp_listeners, [{"fe80::2acf:e9ff:fe17:f97b", 5672}]}
-  ]}
-], []}
-,
-{40,
-"tcp_listen_options.backlog = 128
-tcp_listen_options.nodelay = true
-tcp_listen_options.sndbuf = 196608
-tcp_listen_options.recbuf = 196608",
-[
-  {rabbit, [
-  {tcp_listen_options, [
-                        {backlog,   128},
-                        {nodelay,   true},
-                        {sndbuf,    196608},
-                        {recbuf,    196608}
-                       ]}
-  ]}
-], []}
-,
-
-{42,
-"tcp_listen_options.backlog = 4096
-tcp_listen_options.nodelay = true",
-[
-  {kernel, [
-    {inet_default_connect_options, [{nodelay, true}]},
-    {inet_default_listen_options,  [{nodelay, true}]}
-  ]}]
-,
-[
-  {kernel, [
-    {inet_default_connect_options, [{nodelay, true}]},
-    {inet_default_listen_options,  [{nodelay, true}]}
-  ]},
-  {rabbit, [
-    {tcp_listen_options, [
-                          {backlog,   4096},
-                          {nodelay,   true}
-                         ]}
-  ]}
-], []}
-,
-
-{43,
-"tcp_listen_options.backlog = 4096
-tcp_listen_options.nodelay = true",
-[
-  {rabbit, [
-    {tcp_listen_options, [
-                          {backlog,   4096},
-                          {nodelay,   true}
-                         ]}
-  ]}
-], []}
-,
-
-{44,
-"ssl_handshake_timeout = 10000",
-[
-  {rabbit, [
-    %% 10 seconds
-    {ssl_handshake_timeout, 10000}
-  ]}
-], []}
-,
-
-{45,
-"cluster_partition_handling = pause_if_all_down
-
-## Recover strategy. Can be either 'autoheal' or 'ignore'
-cluster_partition_handling.pause_if_all_down.recover = ignore
-
-## Node names to check
-cluster_partition_handling.pause_if_all_down.nodes.1 = rabbit@myhost1
-cluster_partition_handling.pause_if_all_down.nodes.2 = rabbit@myhost2",
-[{rabbit, [{cluster_partition_handling, {pause_if_all_down, [rabbit@myhost2, rabbit@myhost1], ignore}}]}], []}
-,
-{46,
-"cluster_partition_handling = autoheal",
-[{rabbit, [{cluster_partition_handling, autoheal}]}], []}
-,
-{47,
-"password_hashing_module = rabbit_password_hashing_sha512",
-[
-  {rabbit, [{password_hashing_module, rabbit_password_hashing_sha512}]}
-],[]}
-,
-
-{48,
-"listeners.ssl.1 = 5671
-ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.verify = verify_peer
-ssl_options.fail_if_no_peer_cert = false"
-,
-[
-  {rabbit, [
-     {ssl_listeners, [5671]},
-     {ssl_options, [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
-                    {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
-                    {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
-                    {verify,verify_peer},
-                    {fail_if_no_peer_cert,false}]}
-   ]}
-],[]}
-,
-
-
-{49,
-"listeners.ssl.1 = 5671
-ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.password   = t0p$3kRe7",
-[
- {rabbit, [
-           {ssl_listeners, [5671]},
-           {ssl_options, [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
-                          {certfile,  "test/config_schema_SUITE_data/certs/cert.pem"},
-                          {keyfile,   "test/config_schema_SUITE_data/certs/key.pem"},
-                          {password,  "t0p$3kRe7"}
-                         ]}
-          ]}
-],[]}
-,
-
-{50,
-"listeners.ssl.1 = 5671
-ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.versions.tls1_2 = tlsv1.2
-ssl_options.versions.tls1_1 = tlsv1.1
-ssl_options.versions.tls1   = tlsv1",
-[{ssl, [{versions, ['tlsv1.2', 'tlsv1.1', tlsv1]}]}],
-[{ssl, [{versions, ['tlsv1.2', 'tlsv1.1', tlsv1]}]},
- {rabbit, [
-           {ssl_listeners, [5671]},
-           {ssl_options, [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
-                          {certfile,  "test/config_schema_SUITE_data/certs/cert.pem"},
-                          {keyfile,   "test/config_schema_SUITE_data/certs/key.pem"},
-                          {versions, ['tlsv1.2', 'tlsv1.1', tlsv1]}
-                         ]}
-          ]}
-],[]}
-,
-{51,
-"listeners.ssl.1 = 5671
-ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.versions.tls1_2 = tlsv1.2
-ssl_options.versions.tls1_1 = tlsv1.1",
-[{ssl, [{versions, ['tlsv1.2', 'tlsv1.1']}]}],
-[
- {ssl, [{versions, ['tlsv1.2', 'tlsv1.1']}]},
- {rabbit, [
-           {ssl_listeners, [5671]},
-           {ssl_options, [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
-                          {certfile,  "test/config_schema_SUITE_data/certs/cert.pem"},
-                          {keyfile,   "test/config_schema_SUITE_data/certs/key.pem"},
-                          {versions, ['tlsv1.2', 'tlsv1.1']}
-                         ]}
-          ]}
-],[]}
-,
-{52,
-"listeners.ssl.1 = 5671
-ssl_allow_poodle_attack = true
-ssl_options.cacertfile  = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile    = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile     = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.verify      = verify_peer
-ssl_options.fail_if_no_peer_cert = false",
-[
-  {rabbit, [
-     {ssl_listeners, [5671]},
-     {ssl_allow_poodle_attack, true},
-     {ssl_options, [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
-                    {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
-                    {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
-                    {verify,verify_peer},
-                    {fail_if_no_peer_cert,false}]}
-   ]}
-],[]}
-,
-{53,
-"listeners.ssl.1 = 5671
-ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.depth      = 2
-ssl_options.verify     = verify_peer
-ssl_options.fail_if_no_peer_cert = false",
-[
-  {rabbit, [
-     {ssl_listeners, [5671]},
-     {ssl_options, [{cacertfile,"test/config_schema_SUITE_data/certs/cacert.pem"},
-                    {certfile,"test/config_schema_SUITE_data/certs/cert.pem"},
-                    {keyfile,"test/config_schema_SUITE_data/certs/key.pem"},
-                    {depth, 2},
-                    {verify,verify_peer},
-                    {fail_if_no_peer_cert,false}]}
-   ]}
-],[]}
-,
-{54,
-"stomp.listeners.tcp.1 = 12345",
-[{rabbitmq_stomp, [{tcp_listeners, [12345]}]}],[rabbitmq_stomp]}
-,
-{55,
-"stomp.listeners.tcp.1 = 127.0.0.1:61613
-stomp.listeners.tcp.2 = ::1:61613",
-[{rabbitmq_stomp, [{tcp_listeners, [{"127.0.0.1", 61613},
-                                         {"::1",       61613}]}]}],[rabbitmq_stomp]}
-,
-{56,
-"ssl_options.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-ssl_options.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-ssl_options.keyfile    = test/config_schema_SUITE_data/certs/key.pem
-ssl_options.verify     =  verify_peer
-ssl_options.fail_if_no_peer_cert = true
-
-stomp.listeners.tcp.1 = 61613
-stomp.listeners.ssl.1 = 61614",
-[{rabbit,[
-{ssl_options, [{cacertfile, "test/config_schema_SUITE_data/certs/cacert.pem"},
-               {certfile,   "test/config_schema_SUITE_data/certs/cert.pem"},
-               {keyfile,    "test/config_schema_SUITE_data/certs/key.pem"},
-               {verify,     verify_peer},
-               {fail_if_no_peer_cert, true}]}]},
-{rabbitmq_stomp, [{tcp_listeners, [61613]},
-{ssl_listeners, [61614]}]}
-    ],[]}
-,
-
-{57,
-"stomp.default_user = guest
-stomp.default_pass = guest
-stomp.proxy_protocol = false",
-[{rabbitmq_stomp, [{default_user, [{login, "guest"},{passcode, "guest"}]},
-                   {proxy_protocol, false}]}],
-[rabbitmq_stomp]}
-,
-{58,
-"stomp.ssl_cert_login = true",
-[{rabbitmq_stomp, [{ssl_cert_login, true}]}],
-[rabbitmq_stomp]}
-,
-{59,
-"ssl_cert_login_from = common_name",
-[{rabbit, [{ssl_cert_login_from, common_name}]}], []}
-,
-{60,
-"stomp.default_user = guest
-stomp.default_pass = guest
-stomp.implicit_connect = true
-stomp.proxy_protocol = true",
-[{rabbitmq_stomp, [{default_user,[{login, "guest"}, {passcode, "guest"}]},
-                   {implicit_connect, true}, {proxy_protocol, true}]}],
-[rabbitmq_stomp]}
-,
-{61,
-"stomp.default_vhost = /",
-[{rabbitmq_stomp, [{default_vhost, <<"/">>}]}],
-[rabbitmq_stomp]}
-,
-{62,
-"management.listener.port = 15672
-management.listener.ip   = 127.0.0.1",
-[{rabbitmq_management,
-  [{listener, [{port, 15672},
-               {ip, "127.0.0.1"}
-              ]}
-  ]}
-],
-[rabbitmq_management]}
-,
-{63,
-"management.listener.port = 15672
-management.listener.ssl  = true
-
-management.listener.ssl_opts.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-management.listener.ssl_opts.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-management.listener.ssl_opts.keyfile    = test/config_schema_SUITE_data/certs/key.pem",
-[{rabbitmq_management,
-  [{listener, [{port,     15672},
-               {ssl,      true},
-               {ssl_opts, [{cacertfile, "test/config_schema_SUITE_data/certs/cacert.pem"},
-                           {certfile,   "test/config_schema_SUITE_data/certs/cert.pem"},
-                           {keyfile,    "test/config_schema_SUITE_data/certs/key.pem"}]}
-              ]}
-  ]}
-],
-[rabbitmq_management]},
-{64,
-"web_stomp.port = 12345",
-[{rabbitmq_web_stomp, [{port, 12345}]}],
-[rabbitmq_web_stomp]},
-{65,
-"web_stomp.ssl.port = 15671
-web_stomp.ssl.backlog    = 1024
-web_stomp.ssl.certfile   = test/config_schema_SUITE_data/certs/cert.pem
-web_stomp.ssl.keyfile    = test/config_schema_SUITE_data/certs/key.pem
-web_stomp.ssl.cacertfile = test/config_schema_SUITE_data/certs/cacert.pem
-web_stomp.ssl.password   = changeme",
-[{rabbitmq_web_stomp,
-          [{ssl_config, [{port,       15671},
-                         {backlog,    1024},
-                         {certfile,   "test/config_schema_SUITE_data/certs/cert.pem"},
-                         {keyfile,    "test/config_schema_SUITE_data/certs/key.pem"},
-                         {cacertfile, "test/config_schema_SUITE_data/certs/cacert.pem"},
-                         {password,   "changeme"}]}]}],
-[rabbitmq_web_stomp]},
-{66,
-"web_stomp.ws_frame = binary",
-[{rabbitmq_web_stomp, [{ws_frame, binary}]}],
-[rabbitmq_web_stomp]},
-{67,
-"web_stomp.cowboy_opts.max_keepalive = 10",
-[{rabbitmq_web_stomp,[{cowboy_opts, [{max_keepalive, 10}]}]}],
-[rabbitmq_web_stomp]},
-{68,
-"web_stomp.sockjs_opts.url = https://cdn.jsdelivr.net/sockjs/0.3.4/sockjs.min.js",
-[{rabbitmq_web_stomp,
-    [{sockjs_opts, [{sockjs_url, "https://cdn.jsdelivr.net/sockjs/0.3.4/sockjs.min.js"}]}]}],
-[rabbitmq_web_stomp]},
-{69,
-"auth_backends.1 = http
-auth_http.user_path     = http://some-server/auth/user
-auth_http.vhost_path    = http://some-server/auth/vhost
-auth_http.resource_path = http://some-server/auth/resource",
-[{rabbit, [{auth_backends, [rabbit_auth_backend_http]}]},
-  {rabbitmq_auth_backend_http,
-   [{user_path,     "http://some-server/auth/user"},
-    {vhost_path,    "http://some-server/auth/vhost"},
-    {resource_path, "http://some-server/auth/resource"}]}],
-[rabbitmq_auth_backend_http]},
-{70,
-"tcp_listen_options.linger.on = true
-tcp_listen_options.linger.timeout = 100",
-[{rabbit, [{tcp_listen_options, [{linger, {true, 100}}]}]}],
-[]},
-{72,
-"tcp_listen_options.linger.on = false
-tcp_listen_options.linger.timeout = 100",
-[{rabbit, [{tcp_listen_options, [{linger, {false, 100}}]}]}],
-[]},
-{73,
-"tcp_listen_options.linger.on = true",
-[{rabbit, [{tcp_listen_options, [{linger, {true, 0}}]}]}],
-[]},
-{74,
-"tcp_listen_options.linger.timeout = 100",
-[{rabbit, [{tcp_listen_options, [{linger, {false, 100}}]}]}],
-[]},
-{75,
-"
-autocluster.peer_discovery_backend = rabbit_peer_discovery_dns
-autocluster.dns.hostname = 192.168.0.2.xip.io
-autocluster.node_type = disc",
-[{rabbit, [
-    {autocluster, [{peer_discovery_dns,     [{hostname,  <<"192.168.0.2.xip.io">>}]},
-                   {peer_discovery_backend, rabbit_peer_discovery_dns},
-                   {node_type,              disc}]}
-]}],[]}
-,
-{76,
-"autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
-autocluster.node_type = disc",
-[{rabbit, [
-    {autocluster,        [{peer_discovery_backend, rabbit_peer_discovery_classic_config},
-                          {node_type, disc}]}
-]}],[]},
-{76.1,
-"autocluster.peer_discovery_backend = rabbit_peer_discovery_classic_config
-autocluster.node_type = ram",
-[{rabbit, [
-    {autocluster, [{peer_discovery_backend, rabbit_peer_discovery_classic_config},
-                   {node_type, ram}]}
-]}],[]},
-{77,
-"background_gc_enabled = true
-background_gc_target_interval = 30000",
-[{rabbit, [
-    {background_gc_enabled, true},
-    {background_gc_target_interval, 30000}
-]}],[]},
-{77.1,
-"background_gc_enabled = false
-background_gc_target_interval = 30000",
-[{rabbit, [
-    {background_gc_enabled, false},
-    {background_gc_target_interval, 30000}
-]}],[]},
-
-{78.1,
-"credential_validator.validation_backend = rabbit_credential_validator_min_password_length
-credential_validator.min_length = 10",
-[{rabbit, [
-    {credential_validator, [
-      {validation_backend, rabbit_credential_validator_min_password_length},
-      {min_length,         10}
-    ]}
-]}],[]},
-
-{78.2,
-"credential_validator.validation_backend = rabbit_credential_validator_password_regexp
-credential_validator.regexp = ^abc\\d+",
-[{rabbit, [
-    {credential_validator, [
-      {validation_backend, rabbit_credential_validator_password_regexp},
-      {regexp,             "^abc\\d+"}
-    ]}
-]}],[]},
-
-{79,
-"auth_backends.1 = amqp
-auth_amqp.username = user
-auth_amqp.vhost    = my_vhost
-auth_amqp.exchange = exchange_name
-auth_amqp.timeout  = 100",
-[{rabbit, [{auth_backends, [rabbit_auth_backend_amqp]}]},
-  {rabbitmq_auth_backend_amqp,
-   [{username, <<"user">>},
-    {vhost,    <<"my_vhost">>},
-    {exchange, <<"exchange_name">>},
-    {timeout,  100}]}],
-[rabbitmq_auth_backend_amqp]},
-
-{80,
-"auth_backends.1 = cache
-auth_cache.cached_backend = ldap",
-[
-        {rabbit,
-          [{auth_backends,[rabbit_auth_backend_cache]}]},
-        {rabbitmq_auth_backend_cache,
-          [{cached_backend,rabbit_auth_backend_ldap}]}
-], [rabbitmq_auth_backend_cache]},
-
-{auth_backend_cache,
- "auth_backends.1 = cache",
- [{rabbit, [{auth_backends, [rabbit_auth_backend_cache]}]}],
- [rabbitmq_auth_backend_cache]},
-
-{auth_backend_cache_cached_backend,
- "auth_backends.1 = cache
-  auth_cache.cached_backend = ldap",
- [{rabbit, [{auth_backends, [rabbit_auth_backend_cache]}]},
-  {rabbitmq_auth_backend_cache, [{cached_backend, rabbit_auth_backend_ldap}]}],
- [rabbitmq_auth_backend_cache]},
-{auth_backend_cache_cached_authn_authz,
- "auth_backends.1 = cache
-  auth_cache.cached_backend.authn = ldap
-  auth_cache.cached_backend.authz = http",
- [{rabbit, [{auth_backends, [rabbit_auth_backend_cache]}]},
-  {rabbitmq_auth_backend_cache, [{cached_backend, {rabbit_auth_backend_ldap, rabbit_auth_backend_http}}]}],
- [rabbitmq_auth_backend_cache]},
-{auth_backend_cache_cached_authn,
- "auth_backends.1 = cache
-  auth_cache.cached_backend.authn = ldap",
- [{rabbit, [{auth_backends, [rabbit_auth_backend_cache]}]},
-  {rabbitmq_auth_backend_cache, [{cached_backend, {rabbit_auth_backend_ldap, rabbit_auth_backend_ldap}}]}],
- [rabbitmq_auth_backend_cache]},
-{auth_backend_cache_cache_ttl,
- "auth_backends.1 = cache
-  auth_cache.cache_ttl = 200",
- [{rabbit, [{auth_backends, [rabbit_auth_backend_cache]}]},
-  {rabbitmq_auth_backend_cache, [{cache_ttl, 200}]}],
- [rabbitmq_auth_backend_cache]},
-{auth_backend_cache_cache_module,
- "auth_backends.1 = cache
-  auth_cache.cache_module = rabbit_auth_backend_ets_segmented",
- [{rabbit, [{auth_backends, [rabbit_auth_backend_cache]}]},
-  {rabbitmq_auth_backend_cache, [{cache_module, rabbit_auth_backend_ets_segmented}]}],
- [rabbitmq_auth_backend_cache]},
-
-{81.1,
-"proxy_protocol = true",
-[{rabbit, [
-    {proxy_protocol, true}
-]}],[]},
-{81.2,
-"proxy_protocol = false",
-[{rabbit, [
-    {proxy_protocol, false}
-]}],[]},
-
-{trust_store,
- "trust_store.refresh_interval = 30",
- [{rabbitmq_trust_store, [{refresh_interval, 30}]}],
- [rabbitmq_trust_store]},
-{trust_store_file,
- "trust_store.directory = /tmp/foo/bar",
- [{rabbitmq_trust_store, [{directory, "/tmp/foo/bar"}]}],
- [rabbitmq_trust_store]},
-{trust_store_providers,
- "trust_store.providers.1 = file
-  trust_store.providers.2 = http
-  trust_store.providers.3 = rabbit_trust_store_opera_com_provider",
- [{rabbitmq_trust_store, [{providers, [rabbit_trust_store_file_provider,
-                                       rabbit_trust_store_http_provider,
-                                       rabbit_trust_store_opera_com_provider]}]}],
- [rabbitmq_trust_store]},
-{trust_store_http,
- "trust_store.providers.1 = http
-  trust_store.url = http://example.com
-  trust_store.ssl_options.certfile = test/config_schema_SUITE_data/certs/cert.pem
-  trust_store.ssl_options.password = i_am_password",
- [{rabbitmq_trust_store, [{providers, [rabbit_trust_store_http_provider]},
-                          {url, "http://example.com"},
-                          {ssl_options, [{certfile, "test/config_schema_SUITE_data/certs/cert.pem"},
-                                         {password, "i_am_password"}]}]}],
- [rabbitmq_trust_store]}
-].