Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve warning when using elasticsearch.ssl.certificate without elasticsearch.ssl.key and vice versa #54537

Closed
jportner opened this issue Jan 11, 2020 · 2 comments
Labels
chore Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!

Comments

@jportner
Copy link
Contributor

Starting in 8.0, we should prevent Kibana from starting if elasticsearch.ssl.certificate without elasticsearch.ssl.key and vice versa. This configuration will not enable TLS client authentication to Elasticsearch, and is unsupported.

Starting in 7.6, we're warning the user via deprecation logs (see #54392), so we are safe to enforce this in 8.0 after properly documenting it as a breaking change.

@jportner jportner added chore Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! labels Jan 11, 2020
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-security (Team:Security)

@legrego legrego changed the title Forbid using elasticsearch.ssl.certificate without elasticsearch.ssl.key and vice versa Improve warning when using elasticsearch.ssl.certificate without elasticsearch.ssl.key and vice versa Jun 16, 2021
@jportner
Copy link
Contributor Author

We originally intended to throw an error starting in 8.0, but in the interests of making upgrades easier, we are opting not to make that change.
The existing warning doesn't mention that this will be removed in 8.0, so we can safely close this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!
Projects
None yet
Development

No branches or pull requests

2 participants