Any interest is supporting TLS keyfiles with passwords?

[idahogray]

Checklist

• I have checked the issues list
  for similar or identical enhancement to an existing feature.
• I have checked the pull requests list
  for existing proposed enhancements.
• I have checked the commit log
  to find out if the if the same enhancement was already implemented in the
  master branch.
• I have included all related issues and possible duplicate issues in this issue
  (If there are none, check this box anyway).

Related Issues and Possible Duplicates

Related Issues

• None

Possible Duplicates

• None

Brief Summary

Rabbitmq supports verifying client's using a TLS keyfile. Celery supports this with one exception, the keyfile cannot be password
protected. I believe the underlying Python SSL library does support this so I am wondering if there is interest in adding that support
in Celery?

Design

Architectural Considerations

I believe Kombu would need updates as well as Celery.

Proposed Behavior

I propose adding a new element to the broker_use_ssl dict to provide the keyfile's password.
{"keyfile_password": "some strong password"}.

Proposed UI/UX

I believe only the broker_use_ssl setting would need updated from a UI standpoint.

Diagrams

N/A

Alternatives

The current feature works well, it just doesn't allow the keyfile to have a password. Therefore, a viable alternative is to
leave it the way it is.

[open-collective-bot[bot]]

Hey @idahogray 👋,
Thank you for opening an issue. We will get back to you as soon as we can.
Also, check out our Open Collective and consider backing us - every little helps!

We also offer priority support for our sponsors.
If you require immediate assistance please consider sponsoring us.

[bkovacev]

@auvipy Hello, I'd like to work on this feature for celery as I'd love to incorporate it in my project. We'd probably need to update:
https://github.com/celery/py-amqp/
https://github.com/celery/kombu/
and then the actual celery library.

Would I have the green light for doing this?

[auvipy]

You can come with POC