# Client Certificate Revocation **URL:** \ **Category:** Logstash\ **Created:** [April 20, 2018, 5:40pm UTC](https://discuss.elastic.co/t/client-certificate-revocation/128919 "2018-04-20T17:40:12Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![holdenkilbride](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/holdenkilbride/32/36268_2.png) [@holdenkilbride](https://discuss.elastic.co/u/holdenkilbride)\ **Post date:** [April 20, 2018, 5:40pm UTC](https://discuss.elastic.co/t/client-certificate-revocation/128919/1 "2018-04-20T17:40:13Z")
I have a scenario where we have multiple distributed Filebeat instances sending logs to Logstash. I would like to use force\_peer authentication to verify the client certificates that were signed by a self signed authority. I would like to be able to revoke these certificates at will to later prevent unauthorized/rogue Filebeat clients from establishing a connection to this Logstash instance. I am having trouble getting Logstash to work with a certificate revocation list. Is this something that is even possible to do? Thanks in advance! ---
**Author:** ![JKhondhu](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@JKhondhu](https://discuss.elastic.co/u/JKhondhu)\ **Post date:** [April 20, 2018, 6:33pm UTC](https://discuss.elastic.co/t/client-certificate-revocation/128919/2 "2018-04-20T18:33:47Z")
I would believe `force_peer` to be enough in this situation. What the param does is, it will make the server ask the client to provide a certificate. If the client doesn’t provide a certificate, the connection will be closed. I have not seen or heard of any CRL setup recently. If really needed it could set one up with a proxy to deny access to clients that are no longer trusted. Sounds like a good problem to solve. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 18, 2018, 6:33pm UTC](https://discuss.elastic.co/t/client-certificate-revocation/128919/3 "2018-05-18T18:33:48Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.