Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Ingest Manager] Add support for Custom CA and TLS options when configuring the integration. #73489

Closed
ph opened this issue Jul 28, 2020 · 3 comments
Labels
Team:Fleet Team label for Observability Data Collection Fleet team

Comments

@ph
Copy link
Contributor

ph commented Jul 28, 2020

#72718

Some integrations (mostly metricbeat) allow to define TLS options on the module. We should allow a user to configure the options:

  • Certificate authorities (common): when authenticating the server.
  • Certificate: required when doing mutual authentication.
  • Certificate private key: required when doing mutual authentication.
  • key_passphrase: used to decode the private key.
  • verification_mode (advanced): Control how the client verifies the server.
  • supported protocol (advanced): define which version of TLS to use.
  • cipher_suites (advanced): Define which cipher is supported, required in some lock down environment.
  • curve_types (advanced): Define which ECDH curve to use.
  • renegotiation (advanced): Configure TLS renegotiation
  • client_authentication (advanced): Configure client authentication.
  • ca_sha256 (advanced): This configures a certificate pin that you can use to ensure that a specific certificate is part of the verified chain.
@ph ph added the Team:Fleet Team label for Observability Data Collection Fleet team label Jul 28, 2020
@elasticmachine
Copy link
Contributor

Pinging @elastic/ingest-management (Team:Ingest Management)

@ph
Copy link
Contributor Author

ph commented Aug 17, 2020

Can we make a stop gap feature to allow a user to define the option in a yaml box and have them reference a local path?

@jen-huang
Copy link
Contributor

Closing this until #72718 (design task) is designed and specc'd.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Fleet Team label for Observability Data Collection Fleet team
Projects
None yet
Development

No branches or pull requests

3 participants