logstash-output-http_auth 2.0.0 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 875fbb7298c62715381e65036dc07a041b3a37c5
-  data.tar.gz: 95fb99db88d6e387f60867ffe4716bc81476af58
+  metadata.gz: 900229acd3c479ccc4ecab4f7887a6ad3a8d8ea9
+  data.tar.gz: c5376e396888f948abca79990d05552caf978894
 SHA512:
-  metadata.gz: a3b5d0f5d936050f671fa37a169454f4fa6b9775696015b02056300dde09da06a9e3524331db1ecac69a24bb66e4ca479ec762168fd2053cab8e0f0521432172
-  data.tar.gz: 49dadea25f4059b204ba016c8c92b528e13fee7e02e206f0ec640bd7c503d13a66bf4fa0d383580a2054e8236e5dee9eff5b1ea5b351e2fd6cc09aa2e79e5486
+  metadata.gz: 5f427a214f9885841a95d2796df8472b20268ba4cac96053867ef5aaf41519a4351707e41e21419d775829a6a8d69774f7750ab8efaaf750a1010b01f24dc893
+  data.tar.gz: 1b8b2c963b4e17555e703dbd69cab5c17997f089b8163e98e2b1a8e3f4a95b9f042a3921a90b12a9a6055c1133804c092f033611d5ced68fa67dd44783dd0a63

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+## 2.1.0
+ - Option for SSL-verification
+
 ## 2.0.0
  - Plugins were updated to follow the new shutdown semantic, this mainly allows Logstash to instruct input plugins to terminate gracefully, 
    instead of using Thread.raise on the plugins' threads. Ref: https://github.com/elastic/logstash/pull/3895

data/lib/logstash/outputs/http_auth.rb

@@ -42,9 +42,21 @@ class LogStash::Outputs::HttpAuth < LogStash::Outputs::Base
     # URL to use
     config :url, :validate => :string
 
-    # validate SSL?
+    # If TLS/SSL is used (because the `url` is "https://...", then this
+    # setting will determine if certificate validation is done.
+    #
+    # Note: If you set this to false, you will be destroying the security
+    # features provided by TLS. Setting this to false is never recommended,
+    # especially never in production.
     config :verify_ssl, :validate => :boolean, :default => true
 
+    # If TLS/SSL is used (because `url` is "https://..."), then this setting
+    # will determine which version of the SSL/TLS protocol is used.
+    #
+    # TLSv1.1 is recommended. SSLv3 is heavily discouraged and should not be used
+    # but is available for legacy systems.
+    config :ssl_version, :validate => [ "TLSv1", "TLSv1.1", "SSLv3" ], :default => "TLSv1.1"
+
     # What verb to use
     # only put and post are supported for now
     config :http_method, :validate => ["put", "post"], :required => :true
@@ -106,6 +118,18 @@ class LogStash::Outputs::HttpAuth < LogStash::Outputs::Base
             end
         end
 
+        if !@verify_ssl
+          # User requests that SSL certificates are not validated, so let's
+          # override the certificate verification
+          class << @agent
+            def certificate_verify(host, port, verified, context)
+              return true
+            end
+          end
+        end
+
+        @agent.configuration[FTW::Agent::SSL_VERSION] = @ssl_version
+
         @signed_in = false
         @csrf_token = nil
         @cookies = nil

data/logstash-output-http_auth.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'logstash-output-http_auth'
-  s.version         = '2.0.0'
+  s.version         = '2.1.0'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "This output lets you `PUT` or `POST` events to a generic HTTP(S) endpoint with 2 way authentication"
   s.description     = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
@@ -22,7 +22,7 @@ Gem::Specification.new do |s|
   # Gem dependencies
   s.add_runtime_dependency "logstash-core", ">= 2.0.0.beta2", "< 3.0.0"
 
-  s.add_runtime_dependency 'ftw', ['~> 0.0.40']
+  s.add_runtime_dependency 'ftw', ['~> 0.0.44']
 
   s.add_development_dependency 'logstash-devutils'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-output-http_auth
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.1.0
 platform: ruby
 authors:
 - Signify
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2015-11-11 00:00:00.000000000 Z
+date: 2015-11-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -35,7 +35,7 @@ dependencies:
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: 0.0.40
+        version: 0.0.44
   name: ftw
   prerelease: false
   type: :runtime
@@ -43,7 +43,7 @@ dependencies:
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: 0.0.40
+        version: 0.0.44
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
     requirements: