Certificate revocation via CLR or OCSP

Elastic Stack Beats
1

Hi,

We are using Filebeat (version 5.4.2) to ship our customer's logs to logstash servers and we are testing the process of server certificate revocation.

As Filebeat using golang TLS stack, we noticed that Filebeat implemeation isn't checking for certificate revocation via CLR or OCSP.

Are you aware of it, can we ask to support the implemeation for CLR or OCSP validation?

2

Please open an issue on https://github.com/elastic/beats/issues . While beats is using the golang TLS stack, CLR/OCSP seem not to be available out of the box.