logstash-input-tcp 6.0.5-java → 6.0.6-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0cb08a389f60e23d92944fa9d34519326425c8c794da67134dd6f36ce5c156e6
-  data.tar.gz: 8e3c0728570dcf17e9f38330a9118576f08343730cfa06935b99c2cbb1ef4ccf
+  metadata.gz: 4dbdf0afaf0e9956001477eff23f9dcc7bdeaa82bffdb696ab66657000802662
+  data.tar.gz: 94b90ca185e259f016ed8a40b8303306ffd00bc9f50256db510cd29a448510f7
 SHA512:
-  metadata.gz: 899df3894b0a24fe75dfa054be9a30fd3b43208bce377d215778c2f162bfdb541679e8aa7d173e915798b7dfbef07bb0274b6d0fc066b524e387c174fb6d1b13
-  data.tar.gz: 61ec0890ccbcc36e4554aca9bbbcb0c8adeaeb322419c8e3e47b1a9c3deb6ffef195efe77664cac13761cdb5c452c1be08953b292355bf67fa58ff544b359d85
+  metadata.gz: 8d2572a98f74bf028d2c2ac5bcfeddd651090fb96af903faec94dea3c8ac373f69bfb823fdd9c14e0b5f2711f1e05e7c8b8203e10d3f2ca004217f176df37f37
+  data.tar.gz: b9856bbd395f4080ceaa8029bcb4f348704c3f65d82c5564ee1e7130b40f3f32a931c9939f003cac81e244490544463e6139cf7d8800ba2d80cf6b902aba3d07

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 6.0.6
+  - Updated Netty dependencies. Additionally, this release removes the dependency on `tcnative` +
+    `boringssl`, using JVM supplied ciphers instead. This may result in fewer ciphers being available if the JCE
+    unlimited strength jurisdiction policy is not installed. (This policy is installed by default on versions of the
+    JDK from u161 onwards)[#157](https://github.com/logstash-plugins/logstash-input-tcp/pull/157)
+
 ## 6.0.5
   - Fix potential startup crash that could occur when multiple instances of this plugin were started simultaneously [#155](https://github.com/logstash-plugins/logstash-input-tcp/pull/155)
 

data/lib/logstash/inputs/tcp/compat_ssl_options.rb

@@ -1,4 +1,5 @@
 require 'openssl'
+require "logstash/util/loggable"
 
 # Simulate a normal SslOptions builder:
 #
@@ -12,10 +13,12 @@ require 'openssl'
 #       .set_ssl_certificate_authorities(@ssl_certificate_authorities.to_java(:string))
 #       .build.toSslContext()
 class SslOptions
+  include LogStash::Util::Loggable
 
   java_import 'io.netty.handler.ssl.ClientAuth'
   java_import 'io.netty.handler.ssl.SslContextBuilder'
   java_import 'java.security.cert.X509Certificate'
+  java_import 'javax.crypto.Cipher'
   java_import 'org.bouncycastle.asn1.pkcs.PrivateKeyInfo'
   java_import 'org.bouncycastle.jce.provider.BouncyCastleProvider'
   java_import 'org.bouncycastle.openssl.PEMKeyPair'
@@ -70,6 +73,8 @@ class SslOptions
   def toSslContext
     return nil unless @ssl_enabled
 
+    # Check key strength
+    logger.warn("JCE Unlimited Strength Jurisdiction Policy not installed - max key length is 128 bits") unless Cipher.getMaxAllowedKeyLength("AES") > 128
     # create certificate object
     cf = java.security.cert.CertificateFactory.getInstance("X.509")
     cert_chain = []

data/spec/inputs/tcp_spec.rb

@@ -341,8 +341,7 @@ describe LogStash::Inputs::Tcp do
             "port" => port,
             "ssl_enable" => true,
             "ssl_cert" => certificate_file.path,
-            "ssl_key" => key_file.path,
-            "ssl_extra_chain_certs" => certificate_file.path
+            "ssl_key" => key_file.path
           }
         end
 
@@ -368,7 +367,6 @@ describe LogStash::Inputs::Tcp do
             File.unlink(certificate_file.path)
             File.unlink(key_file.path)
           end
-
         end
 
         context "with pkcs#8 keys" do

data/version

@@ -1 +1 @@
-6.0.5
+6.0.6

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-input-tcp
 version: !ruby/object:Gem::Version
-  version: 6.0.5
+  version: 6.0.6
 platform: java
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-04-02 00:00:00.000000000 Z
+date: 2020-06-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -178,7 +178,7 @@ files:
 - logstash-input-tcp.gemspec
 - spec/inputs/tcp_spec.rb
 - spec/spec_helper.rb
-- vendor/jar-dependencies/org/logstash/inputs/logstash-input-tcp/6.0.5/logstash-input-tcp-6.0.5.jar
+- vendor/jar-dependencies/org/logstash/inputs/logstash-input-tcp/6.0.6/logstash-input-tcp-6.0.6.jar
 - version
 homepage: http://www.elastic.co/guide/en/logstash/current/index.html
 licenses: