时间戳

首页 > 解决方案 > 即使在配置 SSL 属性之后，Spring RMQ 侦听器也始终使用 PLAIN 身份验证

java - 即使在配置 SSL 属性之后，Spring RMQ 侦听器也始终使用 PLAIN 身份验证

问题描述

我有一个 Spring Boot 应用程序，我正在尝试将侦听器配置到已经存在的队列。以下是我在application.yml文件中配置的内容。我还使用参考 spring 文档的适当配置注释了我的配置类@EnableRabbit和侦听器。@RabbitListener

请注意，每个属性都有一个有效的默认值，我在将它们发布到此处之前已将其删除。

spring:
  rabbitmq:
    host: ${rmq_host}
    port: ${rmq_port}
    virtualHost: ${rmq_virtual_host}
    requestedHeartbeat: ${rmq_requested_heartbeat_seconds}
    listener:
      simple:
        concurrency: ${rmq_listener_config_concurrent_users}
        autoStartup: ${rmq_listener_config_auto_startup}
        acknowledge-mode: ${rmq_listener_config_ack_mode}
    ssl:
      enabled: ${rmq_ssl_enabled:true}
      keyStore: ${rmq_ssl_keystore}
      keyStorePassword: ${rmq_ssl_keystore_password}
      trustStore: ${rmq_ssl_truststore}
      trustStorePassword: ${rmq_ssl_truststore_password}

使用此配置，当我尝试启动应用程序时，它会抛出异常。

org.springframework.amqp.rabbit.listener.exception.FatalListenerStartupException: Authentication failure
    at org.springframework.amqp.rabbit.listener.BlockingQueueConsumer.start(BlockingQueueConsumer.java:532)
    at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer$AsyncMessageProcessingConsumer.run(SimpleMessageListenerContainer.java:1389)
    at java.lang.Thread.run(Thread.java:745)
Caused by: org.springframework.amqp.AmqpAuthenticationException: com.rabbitmq.client.AuthenticationFailureException: ACCESS_REFUSED - Login was refused using authentication mechanism PLAIN. For details see the broker logfile.
    at org.springframework.amqp.rabbit.support.RabbitExceptionTranslator.convertRabbitAccessException(RabbitExceptionTranslator.java:65)
    at org.springframework.amqp.rabbit.connection.AbstractConnectionFactory.createBareConnection(AbstractConnectionFactory.java:368)
    at org.springframework.amqp.rabbit.connection.CachingConnectionFactory.createConnection(CachingConnectionFactory.java:565)
    at org.springframework.amqp.rabbit.connection.ConnectionFactoryUtils$1.createConnection(ConnectionFactoryUtils.java:90)
    at org.springframework.amqp.rabbit.connection.ConnectionFactoryUtils.doGetTransactionalResourceHolder(ConnectionFactoryUtils.java:140)
    at org.springframework.amqp.rabbit.connection.ConnectionFactoryUtils.getTransactionalResourceHolder(ConnectionFactoryUtils.java:76)
    at org.springframework.amqp.rabbit.listener.BlockingQueueConsumer.start(BlockingQueueConsumer.java:527)
    ... 2 common frames omitted
Caused by: com.rabbitmq.client.AuthenticationFailureException: ACCESS_REFUSED - Login was refused using authentication mechanism PLAIN. For details see the broker logfile.
    at com.rabbitmq.client.impl.AMQConnection.start(AMQConnection.java:342)
    at com.rabbitmq.client.ConnectionFactory.newConnection(ConnectionFactory.java:909)
    at com.rabbitmq.client.ConnectionFactory.newConnection(ConnectionFactory.java:859)
    at com.rabbitmq.client.ConnectionFactory.newConnection(ConnectionFactory.java:799)
    at org.springframework.amqp.rabbit.connection.AbstractConnectionFactory.createBareConnection(AbstractConnectionFactory.java:352)
    ... 7 common frames omitted

在编写生产者时，我观察到通过将 sasl 配置设置为 EXTERNAL 解决了相同的错误，但我可以这样做，因为我自己编写配置 bean，在这里我尝试使用 spring 的开箱即用支持。

标签： javaspringspring-bootspring-rabbit

解决方案

好的，这就是我发现的。spring-boot 上存在一个开放缺陷，其中提到由于在使用 spring boot 时无法配置 sasl，它始终使用 PLAIN 身份验证模式，并且有一种解决方法可以使我的代码按预期工作。下面是我添加的配置类。

@Configuration
public class RabbitMQConfig {

    @Autowired
    private RabbitProperties rabbitProperties;

    @Autowired
    private CachingConnectionFactory cachingConnectionFactory;

    @PostConstruct
    public void init() {
        if ( rabbitProperties.getSsl().isEnabled() && rabbitProperties.getSsl().getKeyStore() != null ) {
            cachingConnectionFactory.getRabbitConnectionFactory().setSaslConfig( DefaultSaslConfig.EXTERNAL );
        }
    }

}

推荐阅读