When using ssl_verify_mode: force_peer for client verification with Filebeat, does the client certificate need to be issued to the specific host name/IP? I.e the CN is the host name of the node. For example can I use (in a test/dev environment) one self-signed certificate for all of my four Filebea…

Does client verification require host based certificates?

Badger April 28, 2020, 10:18pm 2

That came up recently here. The name in the client certificiate is not checked.

1 Like