RabbitMQ 3.6.2 will have a dependency on socat

[michaelklishin]

This is a heads-up, not an issue: in RabbitMQ 3.6.2, packages will depend on socat but apparently with some installation methods that dependency is ignored.

It would be very nice if this project installed the socat package before installing RabbitMQ.

[jjasghar]

Ah nice thanks @michaelklishin. Is the socat package just a standard pkg from apt or yum?

[michaelklishin]

On Ubuntu it is provided starting with 12.04.

socat is also available for Debian Jessie and later versions.

I could only find so much about yum: according to Percona installation docs, socat has to be installed from EPEL.

[binarin]

It's in EPEL for CentOS 6, and directly available in CentOS 7. Probably the same holds for RHEL.

[jjasghar]

Awesome, I'll get the PR together and ask yall both to verify. 🤘

[jjasghar]

#372 should be what we need right?

[michaelklishin]

@jjasghar 👍

[novettaberin]

Is there any way to make socat optional? Or at the very least ensure that the RPM requires version 1.7.3.1 or newer? see: https://www.pcworld.com/article/3029389/socat-vulnerability-shows-that-crypto-backdoors-can-be-hard-to-spot.html

I can't use RabbitMQ if I have to use a library with a known security hole.

[michaelklishin]

@bericoberin you can use any socat version. This is not the right place to discuss RPM package dependencies: this is a Chef cookbook.