
由于服务器漏洞原因需要关闭 rabbitmq 明文认证模式,于是参照这篇文章 https://www.cnblogs.com/ybyn/p/13959135.html 进行配置
celery 修改配置添加
app.conf.broker_login_method = 'EXTERNAL' app.conf.broker_use_ssl = { 'keyfile': '/ssl/rabbitmq-server.key.pem', 'certfile': '/ssl/rabbitmq-server.cert.pem', 'ca_certs': '/ssl/cacert.pem', 'cert_reqs': ssl.CERT_REQUIRED } 目前报错为
[2022-01-08 16:13:55,672: ERROR/MainProcess] beat: Connection error: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1122). Trying again in 4.0 seconds... 是否是两边 ssl 版本不对问题?尝试在 broker_use_ssl 中添加 'ssl_version': ssl.PROTOCOL_TLSv1_2 之后仍然报这个错误
看了下rabbitmq环境变量ssl版本是1.1,客户端连接这边也修改成1.1之后就变成报这个错误了
[2022-01-08 17:57:50,399: ERROR/MainProcess] beat: Connection error: [SSL: TLSV1_ALERT_INSUFFICIENT_SECURITY] tlsv1 alert insufficient security (_ssl.c:1122). Trying again in 2.0 seconds...