logstash-output-http_auth 2.0.0 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 875fbb7298c62715381e65036dc07a041b3a37c5
4
- data.tar.gz: 95fb99db88d6e387f60867ffe4716bc81476af58
3
+ metadata.gz: 900229acd3c479ccc4ecab4f7887a6ad3a8d8ea9
4
+ data.tar.gz: c5376e396888f948abca79990d05552caf978894
5
5
  SHA512:
6
- metadata.gz: a3b5d0f5d936050f671fa37a169454f4fa6b9775696015b02056300dde09da06a9e3524331db1ecac69a24bb66e4ca479ec762168fd2053cab8e0f0521432172
7
- data.tar.gz: 49dadea25f4059b204ba016c8c92b528e13fee7e02e206f0ec640bd7c503d13a66bf4fa0d383580a2054e8236e5dee9eff5b1ea5b351e2fd6cc09aa2e79e5486
6
+ metadata.gz: 5f427a214f9885841a95d2796df8472b20268ba4cac96053867ef5aaf41519a4351707e41e21419d775829a6a8d69774f7750ab8efaaf750a1010b01f24dc893
7
+ data.tar.gz: 1b8b2c963b4e17555e703dbd69cab5c17997f089b8163e98e2b1a8e3f4a95b9f042a3921a90b12a9a6055c1133804c092f033611d5ced68fa67dd44783dd0a63
data/CHANGELOG.md CHANGED
@@ -1,3 +1,6 @@
1
+ ## 2.1.0
2
+ - Option for SSL-verification
3
+
1
4
  ## 2.0.0
2
5
  - Plugins were updated to follow the new shutdown semantic, this mainly allows Logstash to instruct input plugins to terminate gracefully,
3
6
  instead of using Thread.raise on the plugins' threads. Ref: https://github.com/elastic/logstash/pull/3895
@@ -42,9 +42,21 @@ class LogStash::Outputs::HttpAuth < LogStash::Outputs::Base
42
42
  # URL to use
43
43
  config :url, :validate => :string
44
44
 
45
- # validate SSL?
45
+ # If TLS/SSL is used (because the `url` is "https://...", then this
46
+ # setting will determine if certificate validation is done.
47
+ #
48
+ # Note: If you set this to false, you will be destroying the security
49
+ # features provided by TLS. Setting this to false is never recommended,
50
+ # especially never in production.
46
51
  config :verify_ssl, :validate => :boolean, :default => true
47
52
 
53
+ # If TLS/SSL is used (because `url` is "https://..."), then this setting
54
+ # will determine which version of the SSL/TLS protocol is used.
55
+ #
56
+ # TLSv1.1 is recommended. SSLv3 is heavily discouraged and should not be used
57
+ # but is available for legacy systems.
58
+ config :ssl_version, :validate => [ "TLSv1", "TLSv1.1", "SSLv3" ], :default => "TLSv1.1"
59
+
48
60
  # What verb to use
49
61
  # only put and post are supported for now
50
62
  config :http_method, :validate => ["put", "post"], :required => :true
@@ -106,6 +118,18 @@ class LogStash::Outputs::HttpAuth < LogStash::Outputs::Base
106
118
  end
107
119
  end
108
120
 
121
+ if !@verify_ssl
122
+ # User requests that SSL certificates are not validated, so let's
123
+ # override the certificate verification
124
+ class << @agent
125
+ def certificate_verify(host, port, verified, context)
126
+ return true
127
+ end
128
+ end
129
+ end
130
+
131
+ @agent.configuration[FTW::Agent::SSL_VERSION] = @ssl_version
132
+
109
133
  @signed_in = false
110
134
  @csrf_token = nil
111
135
  @cookies = nil
@@ -1,7 +1,7 @@
1
1
  Gem::Specification.new do |s|
2
2
 
3
3
  s.name = 'logstash-output-http_auth'
4
- s.version = '2.0.0'
4
+ s.version = '2.1.0'
5
5
  s.licenses = ['Apache License (2.0)']
6
6
  s.summary = "This output lets you `PUT` or `POST` events to a generic HTTP(S) endpoint with 2 way authentication"
7
7
  s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
@@ -22,7 +22,7 @@ Gem::Specification.new do |s|
22
22
  # Gem dependencies
23
23
  s.add_runtime_dependency "logstash-core", ">= 2.0.0.beta2", "< 3.0.0"
24
24
 
25
- s.add_runtime_dependency 'ftw', ['~> 0.0.40']
25
+ s.add_runtime_dependency 'ftw', ['~> 0.0.44']
26
26
 
27
27
  s.add_development_dependency 'logstash-devutils'
28
28
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-output-http_auth
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.0.0
4
+ version: 2.1.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Signify
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2015-11-11 00:00:00.000000000 Z
11
+ date: 2015-11-16 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  requirement: !ruby/object:Gem::Requirement
@@ -35,7 +35,7 @@ dependencies:
35
35
  requirements:
36
36
  - - ~>
37
37
  - !ruby/object:Gem::Version
38
- version: 0.0.40
38
+ version: 0.0.44
39
39
  name: ftw
40
40
  prerelease: false
41
41
  type: :runtime
@@ -43,7 +43,7 @@ dependencies:
43
43
  requirements:
44
44
  - - ~>
45
45
  - !ruby/object:Gem::Version
46
- version: 0.0.40
46
+ version: 0.0.44
47
47
  - !ruby/object:Gem::Dependency
48
48
  requirement: !ruby/object:Gem::Requirement
49
49
  requirements: