Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding option to always present the certificate when connecting to ES #24304

Merged
merged 4 commits into from
Oct 23, 2018

Conversation

kobelb
Copy link
Contributor

@kobelb kobelb commented Oct 19, 2018

Resolves #22643

"Release Note: Added option to always present certificate when connecting to Elasticsearch using elasticsearch.ssl.alwaysPresentCertificate: true

@kobelb kobelb requested review from jbudz and legrego October 19, 2018 22:21
@elasticmachine
Copy link
Contributor

💚 Build Succeeded

@kobelb
Copy link
Contributor Author

kobelb commented Oct 22, 2018

retest

Copy link
Member

@legrego legrego left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM pending green CI!

@@ -42,7 +42,8 @@ export default function (kibana) {
certificateAuthorities: array().single().items(string()),
certificate: string(),
key: string(),
keyPassphrase: string()
keyPassphrase: string(),
alwaysPresentCertificate: boolean().default(false),
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we'll need this in monitoring too, iirc it uses its own copy if url is set.

Copy link
Contributor Author

@kobelb kobelb Oct 22, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good call, thanks JBudz

@kobelb
Copy link
Contributor Author

kobelb commented Oct 22, 2018

Dearest Jenkins, please test this.

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

@kobelb kobelb merged commit 9e86a04 into elastic:master Oct 23, 2018
@kobelb kobelb deleted the always-present-certificate branch October 23, 2018 14:12
kobelb added a commit to kobelb/kibana that referenced this pull request Oct 23, 2018
…elastic#24304)

* Adding option to always present the certificate when connecting to ES

* Updating docs

* Adding some more tests

* Adding alwaysPresentCertificate option to monitoring
kobelb added a commit that referenced this pull request Oct 23, 2018
…#24304) (#24401)

* Adding option to always present the certificate when connecting to ES

* Updating docs

* Adding some more tests

* Adding alwaysPresentCertificate option to monitoring
@kobelb kobelb added the Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! label Nov 13, 2018
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release_note:enhancement Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! v6.5.0 v7.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants