Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optionally wrap TCP stream in a TLS session in TCP driver #203

Merged
merged 1 commit into from
Jan 28, 2025

Conversation

vruello
Copy link
Contributor

@vruello vruello commented Dec 2, 2024

Implements #202

This has been tested with the logstash tcp input plugin.

I had to make some changes (implementing TryFrom instead of From) in the subscriptions load and import/export to validate the TCP driver configuration.

The addr parameter has been renamed to host, but addr is still valid in configuration files and the database.

The TCP driver accepts the following parameters:

# - host (required): Hostname or IP Address to send events to
# - port (required): Tcp port to send events to
# - tls_enabled (optional, defaults to false): wrap the TCP stream in a TLS session.
#       Must be set for other tls_ options to take effect
# - tls_certificate_authorities (optional, defaults to undefined): Validate server certificate
#       chain against these authorities. You can define multiple files or paths.
#       All the certificates will be read and added to the trust store.
# - tls_certificate (optional, defaults to undefined): Path to certificate in PEM format.
#       This certificate will be presented to the server.
# - tls_key (optional, defaults to undefined): Path to the private key corresponding to the
#       specified certificate (PEM format).

@vruello vruello force-pushed the tcp_tls branch 2 times, most recently from 24794ef to 131a992 Compare December 2, 2024 18:36
@vruello vruello merged commit 55f741a into cea-sec:main Jan 28, 2025
1 check passed
@vruello vruello mentioned this pull request Jan 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant