opensource/graylog2-server
1
0
Fork 0
mirror of https://github.com/Graylog2/graylog2-server.git synced 2026-03-13 09:32:21 +08:00
Code Issues Packages Projects Releases Wiki Activity

Re-enable hostname verification in opensearch #16219 (#16810)

Browse Source
This commit is contained in:
Tomas Dvorak
2023-10-05 08:04:17 +02:00
committed by GitHub
parent 880fa3b295
commit 087eb93139
1 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
data-node/src/main/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java
View File

@@ -111,11 +111,6 @@ public class OpensearchSecurityConfiguration {
config.put("plugins.security.ssl.transport.truststore_filepath", TRUSTSTORE_FILENAME);
config.put("plugins.security.ssl.transport.truststore_password", truststore.passwordAsString());
// this disables hostname verification for transport. It's a workaround for localnode communication
// via SSL, where Opensearch still tries to communicate with 'localhost' and not the publish_host or other
// configured node names.
config.put("plugins.security.ssl.transport.enforce_hostname_verification", "false");
config.put("plugins.security.ssl.http.enabled", "true");
config.put("plugins.security.ssl.http.keystore_type", KEYSTORE_FORMAT);