logstash-input-beats 6.6.2-java → 6.6.4-java

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 32cf461e4da6065c028c8ed6873b231a3315b2dfe678ec39252bf7b4eb5adb27
4
- data.tar.gz: a622c6b5cc5030210f64ca7759c4719575f7d5a6c33eba4371b7c8d86ce668cc
3
+ metadata.gz: 86ce6b68a88ac7c16e2a523eb6bab08539517339c379d1cfa22dca974d40ee1f
4
+ data.tar.gz: 02dca8ff5dbfde91ca5c948075da5fdace15675e54618726b90c911efd6f58b4
5
5
  SHA512:
6
- metadata.gz: c01a2a94b20c2ad125f0c195980e6b956bbb60f07b690c7d1f498acdddbc8e38741643a3cef0075a8b532ea489324c6e08852b2285106bc95858bd1fe1cf5cd0
7
- data.tar.gz: 6e6b974812c20eea456a03254f53619b8e417c799f1823af533a80935890d833b171b88ab0b68091fcfe48cc245897962f9128081921e350758a7dd0ce6f6d38
6
+ metadata.gz: 01537e0632838ef4e479b73cea3f6cab77e65b760643efbb88e52afafde3c10846e2cb2fb5223ea5228ab825ca357d4b53eae8383d881d4d43cad8d785b181f4
7
+ data.tar.gz: 4867172bce87147d645e874f968b70d8ba8e7d290e8b9337680d93d887a3b7e38650f065fdfbd1075e90f530315cffb3eb5f88a25f1d32096dc8519c57e3669d
data/CHANGELOG.md CHANGED
@@ -1,3 +1,9 @@
1
+ ## 6.6.4
2
+ - [DOC] Fix misleading `enrich/source_data` input beats documentation about the Logstash host. [#478](https://github.com/logstash-plugins/logstash-input-beats/pull/478)
3
+
4
+ ## 6.6.3
5
+ - [DOC] Updated the `ssl_client_authentication` and `ssl_verify_mode` documentation explaining that CN and SAN are not validated. [#473](https://github.com/logstash-plugins/logstash-input-beats/pull/473)
6
+
1
7
  ## 6.6.2
2
8
  - bump netty to 4.1.94 and jackson to 2.15.2 [#474](https://github.com/logstash-plugins/logstash-input-beats/pull/474)
3
9
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 6.6.2
1
+ 6.6.4
data/docs/index.asciidoc CHANGED
@@ -300,8 +300,7 @@ Refer to <<plugins-{type}s-{plugin}-ecs_metadata,ECS mapping>> for detailed info
300
300
  explicitly specified, _excluding_ `codec_metadata` from `enrich` will
301
301
  disable `ecs_compatibility` for this plugin.
302
302
  | source_metadata | Information about the _source_ of the event, such as the IP address
303
- of the inbound connection this input received the event from and the
304
- name of the Logstash host that processed the event
303
+ of the inbound connection this input received the event from
305
304
  | ssl_peer_metadata | Detailed information about the _SSL peer_ we received the event from,
306
305
  such as identity information from the SSL client certificate that was
307
306
  presented when establishing a connection to this input
@@ -436,6 +435,10 @@ Controls the server's behavior in regard to requesting a certificate from client
436
435
  `required` forces a client to present a certificate, while `optional` requests a client certificate
437
436
  but the client is not required to present one. Defaults to `none`, which disables the client authentication.
438
437
 
438
+ When mutual TLS is enabled (`required` or `optional`), the certificate presented by the client must be signed by trusted
439
+ <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> (CAs).
440
+ Please note that the server does not validate the client certificate CN (Common Name) or SAN (Subject Alternative Name).
441
+
439
442
  NOTE: This setting can be used only if <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> is set.
440
443
 
441
444
  [id="plugins-{type}s-{plugin}-ssl_enabled"]
@@ -524,7 +527,11 @@ If the client provides a certificate, it will be validated.
524
527
  `force_peer` will make the server ask the client to provide a certificate.
525
528
  If the client doesn't provide a certificate, the connection will be closed.
526
529
 
527
- This option needs to be used with <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> and a defined list of CAs.
530
+ When mutual TLS is enabled (`peer` or `force_peer`), the certificate presented by the client must be signed by trusted
531
+ <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> (CAs).
532
+ Please note that the server does not validate the client certificate CN (Common Name) or SAN (Subject Alternative Name).
533
+
534
+ NOTE: This setting can be used only if <<plugins-{type}s-{plugin}-ssl_certificate_authorities>> is set.
528
535
 
529
536
  [id="plugins-{type}s-{plugin}-tls_max_version"]
530
537
  ===== `tls_max_version`
@@ -8,4 +8,4 @@ require_jar('io.netty', 'netty-transport', '4.1.94.Final')
8
8
  require_jar('io.netty', 'netty-handler', '4.1.94.Final')
9
9
  require_jar('io.netty', 'netty-transport-native-unix-common', '4.1.94.Final')
10
10
  require_jar('org.javassist', 'javassist', '3.24.0-GA')
11
- require_jar('org.logstash.beats', 'logstash-input-beats', '6.6.2')
11
+ require_jar('org.logstash.beats', 'logstash-input-beats', '6.6.4')
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-input-beats
3
3
  version: !ruby/object:Gem::Version
4
- version: 6.6.2
4
+ version: 6.6.4
5
5
  platform: java
6
6
  authors:
7
7
  - Elastic
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-06-29 00:00:00.000000000 Z
11
+ date: 2023-09-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  requirement: !ruby/object:Gem::Requirement
@@ -327,7 +327,7 @@ files:
327
327
  - vendor/jar-dependencies/io/netty/netty-transport-native-unix-common/4.1.94.Final/netty-transport-native-unix-common-4.1.94.Final.jar
328
328
  - vendor/jar-dependencies/io/netty/netty-transport/4.1.94.Final/netty-transport-4.1.94.Final.jar
329
329
  - vendor/jar-dependencies/org/javassist/javassist/3.24.0-GA/javassist-3.24.0-GA.jar
330
- - vendor/jar-dependencies/org/logstash/beats/logstash-input-beats/6.6.2/logstash-input-beats-6.6.2.jar
330
+ - vendor/jar-dependencies/org/logstash/beats/logstash-input-beats/6.6.4/logstash-input-beats-6.6.4.jar
331
331
  homepage: http://www.elastic.co/guide/en/logstash/current/index.html
332
332
  licenses:
333
333
  - Apache License (2.0)