logstash-input-beats 6.6.2-java → 6.6.3-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 32cf461e4da6065c028c8ed6873b231a3315b2dfe678ec39252bf7b4eb5adb27
-  data.tar.gz: a622c6b5cc5030210f64ca7759c4719575f7d5a6c33eba4371b7c8d86ce668cc
+  metadata.gz: c696c69278011b1aadeedad788ce604967afd127c544aa5a6a8441f47158ca6e
+  data.tar.gz: '09197738b3af6edc6702767c3c8a030f3de47987df7eca313a6ea7068efe0816'
 SHA512:
-  metadata.gz: c01a2a94b20c2ad125f0c195980e6b956bbb60f07b690c7d1f498acdddbc8e38741643a3cef0075a8b532ea489324c6e08852b2285106bc95858bd1fe1cf5cd0
-  data.tar.gz: 6e6b974812c20eea456a03254f53619b8e417c799f1823af533a80935890d833b171b88ab0b68091fcfe48cc245897962f9128081921e350758a7dd0ce6f6d38
+  metadata.gz: 623cf09ed39282f8d9354fe7b3c02ddc041184f5a23fee7608d228e55cf178fb3b050ca8be9570afdc7aa87ab12e91f8d82636c7d780db1e7da7c96245a3cae8
+  data.tar.gz: b9e7af92685131e415127874d160cb93d12ed17497f7b474bcd5beb794fe3f7bfe675136f841c19b2396402e5712eeb84f3103383089fed077503660717077b7

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+## 6.6.3
+ - [DOC] Updated the `ssl_client_authentication` and `ssl_verify_mode` documentation explaining that CN and SAN are not validated. [#473](https://github.com/logstash-plugins/logstash-input-beats/pull/473)
+
 ## 6.6.2
   - bump netty to 4.1.94 and jackson to 2.15.2 [#474](https://github.com/logstash-plugins/logstash-input-beats/pull/474)
 

data/VERSION

@@ -1 +1 @@
-6.6.2
+6.6.3

data/docs/index.asciidoc

@@ -436,6 +436,10 @@ Controls the server's behavior in regard to requesting a certificate from client
 `required` forces a client to present a certificate, while `optional` requests a client certificate
 but the client is not required to present one. Defaults to `none`, which disables the client authentication.
 
+When mutual TLS is enabled (`required` or `optional`), the certificate presented by the client must be signed by trusted
+<<plugins-{type}s-{plugin}-ssl_certificate_authorities>> (CAs).
+Please note that the server does not validate the client certificate CN (Common Name) or SAN (Subject Alternative Name).
+
 NOTE: This setting can be used only if <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> is set.
 
 [id="plugins-{type}s-{plugin}-ssl_enabled"]
@@ -524,7 +528,11 @@ If the client provides a certificate, it will be validated.
 `force_peer` will make the server ask the client to provide a certificate.
 If the client doesn't provide a certificate, the connection will be closed.
 
-This option needs to be used with <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> and a defined list of CAs.
+When mutual TLS is enabled (`peer` or `force_peer`), the certificate presented by the client must be signed by trusted
+<<plugins-{type}s-{plugin}-ssl_certificate_authorities>> (CAs).
+Please note that the server does not validate the client certificate CN (Common Name) or SAN (Subject Alternative Name).
+
+NOTE: This setting can be used only if <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> is set.
 
 [id="plugins-{type}s-{plugin}-tls_max_version"]
 ===== `tls_max_version`

data/lib/logstash-input-beats_jars.rb

@@ -8,4 +8,4 @@ require_jar('io.netty', 'netty-transport', '4.1.94.Final')
 require_jar('io.netty', 'netty-handler', '4.1.94.Final')
 require_jar('io.netty', 'netty-transport-native-unix-common', '4.1.94.Final')
 require_jar('org.javassist', 'javassist', '3.24.0-GA')
-require_jar('org.logstash.beats', 'logstash-input-beats', '6.6.2')
+require_jar('org.logstash.beats', 'logstash-input-beats', '6.6.3')

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-input-beats
 version: !ruby/object:Gem::Version
-  version: 6.6.2
+  version: 6.6.3
 platform: java
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-06-29 00:00:00.000000000 Z
+date: 2023-07-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -327,7 +327,7 @@ files:
 - vendor/jar-dependencies/io/netty/netty-transport-native-unix-common/4.1.94.Final/netty-transport-native-unix-common-4.1.94.Final.jar
 - vendor/jar-dependencies/io/netty/netty-transport/4.1.94.Final/netty-transport-4.1.94.Final.jar
 - vendor/jar-dependencies/org/javassist/javassist/3.24.0-GA/javassist-3.24.0-GA.jar
-- vendor/jar-dependencies/org/logstash/beats/logstash-input-beats/6.6.2/logstash-input-beats-6.6.2.jar
+- vendor/jar-dependencies/org/logstash/beats/logstash-input-beats/6.6.3/logstash-input-beats-6.6.3.jar
 homepage: http://www.elastic.co/guide/en/logstash/current/index.html
 licenses:
 - Apache License (2.0)