Specify CA certificate to verify certificates coming from clients

[tomghuang]

Is there any way to specify CA certificate and key so that fluent-plugin-beats can verify the clients?

We don't want to accept logs from any client with self-signed certificate. We only want to accept logs from our own client machines with certificates signed by our own CA certificate and key. However, we can't find the setting to specify the CA certificate and key.