fluent-plugin-site24x7 0.1.8 → 0.1.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1b8c88b38b04b7fb661aa044a5d1aefb232b75db95739ba55db2ee437dd81b71
-  data.tar.gz: d6bede1bdf2d5b6ed884220d6d5de63220cbb285ae1dfbacc12cdafcb6be36e4
+  metadata.gz: a1b8cf65db3d72b0f868f17783d552cb0139865f90b46fda5f785e25c46fb006
+  data.tar.gz: 0e1d311f59df96e5490798243577e4d970fbccfb074c0c7126e19c344dfebf26
 SHA512:
-  metadata.gz: 194fbd7cb5a06e5d8c6f091201c15c232998df41b4521c32fda15a83148cd361c84a2ab1143ad44c52fb2b027edfc5a31485882ff735ef0f7e0efad8ca2ff06d
-  data.tar.gz: b8ed8e93341a92586ad35f9e17df1632ba9aae2c7d1893eed7f0d6b6baf375ab79954acb638aa19697479c6150e060e682297de7138bba64f5d58867ce1af6d0
+  metadata.gz: 384d2bfd8adad89a587557ceead314160c4fca185b447fb1bd39f41f79b275c1f4a3c5628d1ffd2fded32135595583aa6e99a2f42e527b16391f9330848fb0f6
+  data.tar.gz: f8045692f66faa2128aa344c8bbfbe88591e49c60cedbeb47a10f41a5d7ead43d23e52ec3f62be9f543bc4d5dcb0eddb57dc694c18e1d55462f6e1e0e1cb726d

data/README.md

@@ -64,8 +64,11 @@ retry_timeout | Time after which the data is going to be dropped | 24 hours
 http_idle_timeout | Timeout (in seconds) for which http persistent connection will stay open without traffic | 5 seconds
 http_read_timeout | Timeout (in seconds) when the socket connects until the connection breaks | 30 secods
 http_proxy | Your proxy uri | nil
+skip_ssl_verify | When true, disables TLS certificate verification of the upload endpoint. **Not recommended** (exposes the API key and log data to on-path attackers); leave false unless you terminate TLS at a trusted proxy with a private CA | false
 
 ## Release Notes
+* 0.1.9 - Security: TLS certificate verification enabled by default (VERIFY_PEER); added skip_ssl_verify opt-out
+* 0.1.8 - Widen net-http-persistent constraint for Ruby 3.x
 * 0.1.7 - Sending stop signal to Fluentd for unrecoverable errors
 * 0.1.6 - chunk unique id added for each upload and unlimited retry support
 * 0.1.5 - Retry handled for empty upload-id

data/fluent-plugin-site24x7.gemspec

@@ -3,7 +3,7 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 
 Gem::Specification.new do |spec|
   spec.name    = "fluent-plugin-site24x7"
-  spec.version = "0.1.8"
+  spec.version = "0.1.9"
   spec.authors = ["Magesh Rajan"]
   spec.email   = ["support@site24x7.com"]
 
@@ -28,5 +28,4 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency "fluentd", [">= 0.14.10", "< 2"]
   spec.add_runtime_dependency "net-http-persistent", '>= 3.1', '< 5'
 
-
 end

data/lib/fluent/plugin/out_site24x7.rb

@@ -28,6 +28,9 @@ class Fluent::Site24x7Output < Fluent::Plugin::Output
   config_param :http_idle_timeout, :integer, default: 5
   config_param :http_read_timeout, :integer, default: 30
   config_param :http_proxy, :string, :default => nil
+  # When true, disables TLS certificate verification of the upload endpoint.
+  # NOT recommended: it exposes the API key and log data to on-path attackers.
+  config_param :skip_ssl_verify, :bool, :default => false
 
   config_section :buffer do
     config_set_default :@type, "memory"
@@ -188,7 +191,15 @@ class Fluent::Site24x7Output < Fluent::Plugin::Output
     @uri = URI(upload_url)
     log.info "Starting HTTP connection to #{upload_url}"
     @s247_http_client = Net::HTTP::Persistent.new name: "fluent-plugin-site24x7", proxy: :ENV
-    @s247_http_client.verify_mode = OpenSSL::SSL::VERIFY_NONE
+    # Verify the server certificate by default (Net::HTTP::Persistent also does
+    # hostname verification when peer verification is on). skip_ssl_verify=true
+    # is an explicit, discouraged opt-out for trusted TLS-terminating proxies.
+    if @skip_ssl_verify
+      @s247_http_client.verify_mode = OpenSSL::SSL::VERIFY_NONE
+      log.warn "skip_ssl_verify=true: TLS certificate verification is disabled; the API key and logs can be intercepted by on-path attackers"
+    else
+      @s247_http_client.verify_mode = OpenSSL::SSL::VERIFY_PEER
+    end
     @s247_http_client.idle_timeout = @http_idle_timeout
     @s247_http_client.read_timeout = @http_read_timeout
     @s247_http_client.override_headers["Content-Type"] = "application/json"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fluent-plugin-site24x7
 version: !ruby/object:Gem::Version
-  version: 0.1.8
+  version: 0.1.9
 platform: ruby
 authors:
 - Magesh Rajan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-07-09 00:00:00.000000000 Z
+date: 2026-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler