"certificate" verification mode for Logstash's output plugin for Elasticsearch

Elastic Stack Logstash
1

In the following page

valid values for SSL verification mode are "full" , "none"
I want Logstash to only verify the certificate provided by Elasticsearch is from a trusted authority and not the hostname itself , is there anyway to do this ?

I noticed that Elasticsearch itself had an option called "certificate" for ssl.verification_mode

Is such an option available for Logstash's output plugin ? If not how do I only verify the certificate is from a trusted authority & not the hostname itself

2

I don't think the elasticsearch output supports this now. I believe it used to unconditionally verify the certificate was trusted and only verify the hostname match if the verification mode was "strict", but this changed at some point in the past.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.