opensource/graylog2-server
1
0
Fork 0
mirror of https://github.com/Graylog2/graylog2-server.git synced 2026-03-13 09:32:21 +08:00
Code Issues Packages Projects Releases Wiki Activity

Adding loopback addresses & primary IP to cert. (#16957)

Browse Source 
* Refactor and add `localhost`/loopback addresses to SAN.

* Adding IP address for main hostname as well.

* Working in changes required after merge.
This commit is contained in:
Dennis Oelkers
2023-10-17 09:59:50 +02:00
committed by GitHub
parent dd08d70df7
commit e1ca042919
5 changed files with 63 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
data-node/src/main/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java
View File

@@ -21,7 +21,6 @@ import com.fasterxml.jackson.databind.ObjectMapper;
import com.fasterxml.jackson.dataformat.yaml.YAMLMapper;
import com.google.common.collect.ImmutableMap;
import org.apache.commons.lang3.RandomStringUtils;
import org.graylog.datanode.Configuration;
import org.graylog.datanode.configuration.DatanodeConfiguration;
import org.graylog.datanode.configuration.TruststoreCreator;
import org.graylog.security.certutil.CertConstants;
@@ -103,8 +102,6 @@ public class OpensearchSecurityConfiguration {
if (securityEnabled()) {
config.putAll(commonSecureConfig());
config.put("plugins.security.ssl.transport.enforce_hostname_verification", "false");
config.put("plugins.security.ssl.transport.keystore_type", KEYSTORE_FORMAT);
config.put("plugins.security.ssl.transport.keystore_filepath", transportCertificate.location().getFileName().toString()); // todo: this should be computed as a relative path
config.put("plugins.security.ssl.transport.keystore_password", transportCertificate.passwordAsString());