Add distributed Erlang TLS documentation for Windows

Fixes #426 and [159602360]

Also see rabbitmq/rabbitmq-server#1666

Author: lukebakken

site/clustering-ssl.xml

@@ -202,8 +202,8 @@ CTL_ERL_ARGS="-pa $ERL_SSL_PATH \
         commands will look like these:</p>
 
 <pre class="sourcecode bash">
-echo erts-6.1/bin/erl -boot releases/3.4.3/start_clean \
--eval 'io:format("~p", [code:lib_dir(ssl, ebin)]),halt().' -noshell
+erl -boot releases/3.4.3/start_clean \
+-eval 'io:format("ERL_SSL_PATH=~s~n", [filename:dirname(code:which(inet_tls_dist))])' -s init stop
 "/path/to/erl/lib/ssl-5.3.5/ebin"
 export ERL_SSL_PATH=/path/to/erl/lib/ssl-5.3.5/ebin
 </pre>
@@ -225,9 +225,72 @@ export ERL_SSL_PATH=/path/to/erl/lib/ssl-5.3.5/ebin
 
       <doc:section name="how-to-windows">
         <doc:heading>Windows</doc:heading>
+        <p>There are some minor differences when configuring TLS for distributed Erlang on Windows.
+          First, the command to find the location of the <code>inet_tls_dist</code> module is
+          different due to shell parsing rules:
+        </p>
+
+<pre class="sourcecode bash">
+erl -noinput -eval "io:format(""ERL_SSL_PATH=~s~n"", [filename:dirname(code:which(inet_tls_dist))])" -s init stop
+</pre>
+
+        <p>Next, the file containing the custom environment variables is named <code>rabbitmq-env-conf.bat</code> on Windows.
+          This file <em>must</em> be saved to the <code>%AppData%\RabbitMQ</code> directory of the administrative
+          user that installed RabbitMQ.
+        </p>
+        <p>Here is a complete <code>rabbitmq-env-conf.bat</code> file using the <code>-ssl_dist_opfile</code> setting.
+          Note the use of forward-slash directory delimiters.
+        </p>
+
+<pre class="sourcecode bash">
+@echo off
+rem NOTE: If spaces are present in any of these paths,
+rem double quotes must be used.
+
+rem NOTE: the following path is **system dependent**.
+set SSL_PATH="C:/Program Files/erl10.0.1/lib/ssl-9.0/ebin"
 
-        <p>TBD.</p>
+rem NOTE: pre-RabbitMQ 3.7.8 variable names:
+set RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS=-pa %SSL_PATH% ^
+    -proto_dist inet_tls ^
+    -ssl_dist_optfile C:/Users/rmq_user/AppData/Roaming/RabbitMQ/ssl_dist.config
 
+set RABBITMQ_CTL_ERL_ARGS=-pa %SSL_PATH% ^
+    -proto_dist inet_tls ^
+    -ssl_dist_optfile C:/Users/rmq_user/AppData/Roaming/RabbitMQ/ssl_dist.config
+
+rem NOTE: post-RabbitMQ 3.7.8 variable names:
+rem set SERVER_ADDITIONAL_ERL_ARGS=...
+rem set CTL_ERL_ARGS=...
+
+rem See this PR for details
+rem https://github.com/rabbitmq/rabbitmq-server/pull/1666
+</pre>
+
+        <p>Finally, here is an example <code>ssl_dist.config</code> file.
+          Note that, as with Unix systems, more ssl options are available
+          to be set here if necessary.</p>
+
+<pre class="sourcecode bash">
+[
+    {server, [
+        {cacertfile, "C:/Path/To/ca_certificate.pem"},
+        {certfile, "C:/Path/To/server_certificate.pem"},
+        {keyfile, "C:/Path/To/server_key.pem"},
+        {secure_renegotiate, true},
+        {verify, verify_peer},
+        {fail_if_no_peer_cert, true}
+    ]},
+    {client, [
+        {cacertfile, "C:/Path/To/ca_certificate.pem"},
+        {certfile, "C:/Path/To/client_certificate.pem"},
+        {keyfile, "C:/Path/To/client_key.pem"},
+        {secure_renegotiate, true},
+        {verify, verify_peer},
+        {fail_if_no_peer_cert, true}
+    ]}
+].
+</pre>
       </doc:section>
   </body>
 </html>