logstash-mixin-http_client 7.1.0 → 7.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 97fab7f4d10ff4a671b1e2bace7d0b2c4bf6a661b84361040a0f8acf28896291
-  data.tar.gz: 3be65e03ac4c5f269ce331b01f1d27529a293a46f31756a709dbd0f4e3372295
+  metadata.gz: 967d2306be29d709b80a1e2483e09c7eb06acdbc5079af3090ef265427377b33
+  data.tar.gz: 6d358bd6a4b819a14cd669af4d14ea3f130b2802bec6872e6ef03f27b8c5e186
 SHA512:
-  metadata.gz: bd2a4e6610601b961fe6ebe6e88723ca0067b4a07bb66a2f84699843ade8fc6c613707d697bb288587cd7dce95a65fd23551891e9d7a2274136d684aebf7c8b6
-  data.tar.gz: 816a31d07cbacb997a2d71750d282089f404d52f6e6a8e092045fb29521746029dbb64391201f936a1edd83dcf32e01e49ca8ded8932d73d942c0fe1239bd34b
+  metadata.gz: a0ad4d31a8e1a72d38686466b141ff16c22b24821d8c9dc9d8a0df6d2745d05b7a4e644a26b869c4c6bacac4d73e27aaa2fa065dcbbd67d1bbda2b35153e08cf
+  data.tar.gz: b3bf2076187e018a00b19c0c2ec9eb770ae241879fc798aad60ec8b6bb02f79ce508aa23f9ff5c29ba03280288cd2cc3d5e002a87aebda51f680d2f322fe6880

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+## 7.2.0
+  - Feat: add `ssl_supported_protocols` option [#40](https://github.com/logstash-plugins/logstash-mixin-http_client/pull/40) 
+
 ## 7.1.0
   - Feat: add `ssl_verification_mode` [#39](https://github.com/logstash-plugins/logstash-mixin-http_client/pull/39) 
 

data/lib/logstash/plugin_mixins/http_client.rb

@@ -76,6 +76,9 @@ module LogStash::PluginMixins::HttpClient
     #   none: no verification of the server’s certificate
     config :ssl_verification_mode, :validate => ['full', 'none'], :default => 'full'
 
+    # NOTE: the default setting [] uses Java SSL engine defaults.
+    config :ssl_supported_protocols, :validate => ['TLSv1.1', 'TLSv1.2', 'TLSv1.3'], :default => [], :list => true
+
     # If you need to use a custom truststore (`.jks`) specify that here. This does not work with .pem certs!
     config :truststore, :validate => :path
 
@@ -187,6 +190,10 @@ module LogStash::PluginMixins::HttpClient
       c[:ssl][:verify] = :disable
     end
 
+    if @ssl_supported_protocols && @ssl_supported_protocols.any?
+      c[:ssl][:protocols] = @ssl_supported_protocols
+    end
+
     c
   end
 

data/logstash-mixin-http_client.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name            = 'logstash-mixin-http_client'
-  s.version         = '7.1.0'
+  s.version         = '7.2.0'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "AWS mixins to provide a unified interface for Amazon Webservice"
   s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"

data/spec/plugin_mixin/http_client_spec.rb

@@ -216,4 +216,39 @@ describe LogStash::PluginMixins::HttpClient do
     end
 
   end
+
+  describe "with supported protocols" do
+    context "default" do
+      let(:conf) { basic_config }
+
+      it "does not set manticore protocols option" do
+        expect( Dummy.new(conf).client_config[:ssl] ).to_not include :protocols
+      end
+    end
+
+    context "empty" do
+      let(:conf) { basic_config.merge("ssl_supported_protocols" => []) }
+
+      it "does not set manticore protocols option" do
+        expect( Dummy.new(conf).client_config[:ssl] ).to_not include :protocols
+      end
+    end
+
+    context "'TLSv1.3'" do
+      let(:conf) { basic_config.merge("ssl_supported_protocols" => ['TLSv1.3']) }
+
+      it "sets manticore protocols option" do
+        expect( Dummy.new(conf).client_config[:ssl] ).to include :protocols => ['TLSv1.3']
+      end
+    end
+
+    context "'TLSv1.2' and 'TLSv1.3'" do
+      let(:conf) { basic_config.merge("ssl_supported_protocols" => ['TLSv1.3', 'TLSv1.2']) }
+
+      it "sets manticore protocols option" do
+        expect( Dummy.new(conf).client_config[:ssl] ).to include :protocols => ['TLSv1.3', 'TLSv1.2']
+      end
+    end
+
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-mixin-http_client
 version: !ruby/object:Gem::Version
-  version: 7.1.0
+  version: 7.2.0
 platform: ruby
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-01-25 00:00:00.000000000 Z
+date: 2022-03-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement