- 1 minutes to read

FAQ - SSL TLS Support

Question

How do I monitor RabbitMQ over SSL/TLS?

Answer

The agent supports HTTPS connections to RabbitMQ Management API. Configure Management Plugin for HTTPS (port 15671 by default), provide SSL certificate trust chain, and specify HTTPS URL in agent configuration.

Configuration Steps

1. Enable HTTPS on RabbitMQ Management Plugin

Edit rabbitmq.config or advanced.config:

[
  {rabbitmq_management, [
    {listener, [
      {port, 15671},
      {ssl, true},
      {ssl_opts, [
        {cacertfile, "/path/to/ca_certificate.pem"},
        {certfile,   "/path/to/server_certificate.pem"},
        {keyfile,    "/path/to/server_key.pem"},
        {verify, verify_peer},
        {fail_if_no_peer_cert, false}
      ]}
    ]}
  ]}
].

Restart RabbitMQ service after configuration change.

2. Configure Agent to Use HTTPS

In the Nodinite agent configuration:

  • Management API URL: https://rabbitmq-server:15671
  • SSL Certificate Validation: Enable/disable certificate validation based on environment (disable for self-signed certificates in dev/test)
  • Certificate Trust Chain: Import RabbitMQ CA certificate into Windows Certificate Store (for Windows agents) or configure trust store path (for Linux agents)

3. Test HTTPS Connectivity

Verify Management API accessible over HTTPS:

curl -u username:password https://rabbitmq-server:15671/api/overview

Default Ports

Protocol Default Port Configuration
HTTP 15672 {ssl, false}
HTTPS 15671 {ssl, true}

Next Step

Prerequisites for RabbitMQ Monitoring Agent
Configuration Guide

RabbitMQ Agent Overview
Troubleshooting Overview