# LS environment variable handling doesn't appear to behave as documented

**URL:** https://discuss.elastic.co/t/ls-environment-variable-handling-doesnt-appear-to-behave-as-documented/73828
**Category:** Logstash
**Created:** [February 3, 2017, 10:52am UTC](https://discuss.elastic.co/t/ls-environment-variable-handling-doesnt-appear-to-behave-as-documented/73828 "2017-02-03T10:52:54Z")
**Posts on this page:** 1
**Showing post:** 12

<div class="post-metadata">

### Author: ![nick-george](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nick-george/32/23318_2.png) [@nick-george](https://discuss.elastic.co/u/nick-george)
#### Post date: [February 7, 2017, 9:40am UTC](https://discuss.elastic.co/t/ls-environment-variable-handling-doesnt-appear-to-behave-as-documented/73828/12 "2017-02-07T09:40:52Z")

</div>

Hi Fabien,

I have tried '/dev/null' and an empty file. What happens is the beats input passes these paths to the SSL library. When a client then attempts to communicate to the beats input, the SSL library then forces the use of client side certs, and then fails when no certificate is provided (by the client). Having a look at [https://github.com/logstash-plugins/logstash-input-beats/blob/master/src/main/java/org/logstash/netty/SslSimpleBuilder.java](https://github.com/logstash-plugins/logstash-input-beats/blob/master/src/main/java/org/logstash/netty/SslSimpleBuilder.java), it appears by setting anything in the CA list, requireClientAuth() will return true, then because verify mode defaults to FORCE\_PEER, SSL connections fail, even if the user has specified NONE as the verify mode in the beats configuration.

I've put in a pull-request ([https://github.com/logstash-plugins/logstash-input-beats/pull/182](https://github.com/logstash-plugins/logstash-input-beats/pull/182)) to have the beats input fixed. Still waiting on a response for that.

I have also created this in an attempt to have the Java SSL code fixed up. [Apparent bug in logstash-input-beats in SslSimpleBuilder.java](https://discuss.elastic.co/t/apparent-bug-in-logstash-input-beats-in-sslsimplebuilder-java/74206). If someone from the appropriate team is happy, I'll create another issue for that.

Cheers,  
Nick

---

_[View the full topic](https://discuss.elastic.co/t/ls-environment-variable-handling-doesnt-appear-to-behave-as-documented/73828)._
