Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support self-signed certificates with Elasticsearch #1683

Closed
adriancole opened this issue Aug 8, 2017 · 6 comments

Comments

@adriancole
Copy link
Contributor

@adriancole adriancole commented Aug 8, 2017

@aliostad asked about self-signed certificates with ES. I mentioned if this becomes common practice, we could consider supporting it. Looking at spark, it does seem like common practice, as they even have a configuration item for it.

https://www.elastic.co/guide/en/elasticsearch/hadoop/current/configuration.html#_ssl

Please upvote if you are interested in this cc @openzipkin/elasticsearch

@aliostad

This comment has been minimized.

Copy link

@aliostad aliostad commented Aug 8, 2017

Hi, thank you!

Problem was that we had a valid cert but the hostname was not matching and there is absolutely no way to sort this out.

I spent hours and days (and I am glad because I learnt so much) on it and imported the cert (by creating my own dockerfile and adding steps to do it) only to find out the error is hostname not verified.

I wish we could have an option to disable hostname verification. This is what I was getting and I could not find a non-code solution. There was a solution by running -javaagent:blah.jar but seems it replaces spring's agent.

@aliostad

This comment has been minimized.

Copy link

@aliostad aliostad commented Aug 8, 2017

👍 +1

@rangwea

This comment has been minimized.

Copy link

@rangwea rangwea commented Jan 25, 2018

@aliostad so,how do you solve this problem?

@shakuzen

This comment has been minimized.

Copy link
Member

@shakuzen shakuzen commented Oct 23, 2018

Related to #1833?

@adriancole adriancole closed this Aug 26, 2019
@quangnguyen

This comment has been minimized.

Copy link

@quangnguyen quangnguyen commented Nov 5, 2019

I wish we could have an option to disable hostname verification.

I still do not see that there is a option to disable hostname verification. This could be a useful thing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
5 participants
You can’t perform that action at this time.