Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Different behaviour for ssl_endpoint_identification_algorithm between input and output #49

Open
andsel opened this issue Jul 31, 2020 · 2 comments

Comments

@andsel
Copy link
Contributor

andsel commented Jul 31, 2020

With PR #8 changed the behavior of ssl_endpoint_identification_algorithm for the output, now it's empty it disable the truststore but the input keeps the old behavior, nil check instead of empty check:

props.put("ssl.endpoint.identification.algorithm", ssl_endpoint_identification_algorithm) unless ssl_endpoint_identification_algorithm.nil?

  • Version: >= 10.2.0
  • Operating System:
  • Config File:
input {
	tcp {
		port => 12345
	}
}
output {
	kafka {
		bootstrap_servers => ["${AMQ_METRIC_HOST_LB}"]
		codec => json
		topic_id => "cep_metric_rapid_corporate"
		security_protocol => "SSL"
		ssl_endpoint_identification_algorithm => ""
		ssl_key_password => "${CERT_PASSWORD}"
		ssl_keystore_location => "${KEYSTORE_ADDRESS}"
		ssl_keystore_password => "${CERT_PASSWORD}"
		ssl_keystore_type => "jks"
		ssl_truststore_location => "${TRUSTSTORE_ADDRESS}"
		ssl_truststore_password => "${CERT_PASSWORD}"
		ssl_truststore_type => "jks"
	}
}
  • Steps to Reproduce: run Logstash the above pipeline config with --debug and in log for kafka output appears:
	ssl.trustmanager.algorithm = PKIX
	ssl.truststore.location = null
	ssl.truststore.password = null
	ssl.truststore.type = JKS

while in input keeping always ssl_endpoint_identification_algorithm => "" it prints:

	ssl.trustmanager.algorithm = PKIX
	ssl.truststore.location = /path/to/truststore.jks
	ssl.truststore.password = [hidden]
	ssl.truststore.type = jks
@andsel
Copy link
Contributor Author

andsel commented Jul 31, 2020

cc @kares

@kares
Copy link
Contributor

kares commented Jul 31, 2020

Thanks Andrea, makes sense - reviewing #8 should have realized it's also used for the input.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants