# TLS Logstash
**URL:** https://discuss.elastic.co/t/tls-logstash/305735
**Category:** Logstash
**Created:** [May 26, 2022, 4:45pm UTC](https://discuss.elastic.co/t/tls-logstash/305735 "2022-05-26T16:45:09Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)
#### Post date: [May 26, 2022, 4:45pm UTC](https://discuss.elastic.co/t/tls-logstash/305735/1 "2022-05-26T16:45:09Z")
Hello guys,
I have a beats input on a logstash pipeline using SSL /TLS:
```auto
input {
beats {
port => 5044
ssl => true
ssl_certificate => "/etc/../mycert.pem"
ssl_key => "/etc/.../mycert.pkcs8"
ssl_certificate_authorities => ["/etc/.../mycert-ca.pem"]
cipher_suites => ["TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"]
}
}
```
I have not set the `ssl_verify_mode` so it should have the default value "none" which doesn't do any client verification.
So Is it possible, for example have communication between a filebeat and this logstash pipeline , without filebeat presenting certificates?
Regards,
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [May 26, 2022, 5:01pm UTC](https://discuss.elastic.co/t/tls-logstash/305735/2 "2022-05-26T17:01:04Z")
> [@Thuunder7](#):
>
> Is it possible, for example have communication between a filebeat and this logstash pipeline , without filebeat presenting certificates?
Yes. Why are you defining ssl\_certificate\_authorities when it is not used?
---
### Author:  [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)
#### Post date: [May 26, 2022, 5:20pm UTC](https://discuss.elastic.co/t/tls-logstash/305735/3 "2022-05-26T17:20:34Z")
I have some filebeats that use `ssl.verification_mode: "full"`, and i think by settings this i would need the CA on the server side. Am i wrong?
If i set `ssl.verification_mode: "none"` on the filebeat side , would this allow filebeat to not use certificates? With also keeping ssl\_verify\_mode =\> `"none"` on the logstash pipeline.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [May 26, 2022, 5:37pm UTC](https://discuss.elastic.co/t/tls-logstash/305735/4 "2022-05-26T17:37:40Z")
> [@Thuunder7](#):
>
> I have some filebeats that use `ssl.verification_mode: "full"` , and i think by settings this i would need the CA on the server side. Am i wrong?
verification\_mode determines whether filebeat will verify the server certificate that the beats input presents `ssl_certificate => "/etc/../mycert.pem"`. If you set it to full then that certificate must be current, valid, name-matched and signed by a chain that filebeat trusts. The CA that signed the ssl\_certificate is most likely included in /etc/../mycert.pem, so you cannot separately supply it.
---
### Author:  [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)
#### Post date: [May 26, 2022, 5:56pm UTC](https://discuss.elastic.co/t/tls-logstash/305735/5 "2022-05-26T17:56:59Z")
Thanks for that information, i will modify my pipeline accordingly.
Regarding the no usage of certificates on the client side, how is this achieved?
---
### Author:  [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)
#### Post date: [May 26, 2022, 7:06pm UTC](https://discuss.elastic.co/t/tls-logstash/305735/6 "2022-05-26T19:06:23Z")
By removing the CA from the pipeline running on logstash, and using `verification_mode: "none"` on filebeat i was able to connect with logstash without the usage of any certificate.
Thanks @Badger for your help and time 🙂
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 23, 2022, 7:06pm UTC](https://discuss.elastic.co/t/tls-logstash/305735/7 "2022-06-23T19:06:33Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.