github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 09:48:58 -04:00
Code Issues Projects Releases Packages Wiki Activity

Add requestCert option to SSL config (#38844) (#38917)

Browse source 
* Add requestCert option to SSL config

The proxy plugin needs to require a client certificate, so this option
must be surfaced into the public interface for the HttpServer in Kibana

* [fix] use mapped variable
This commit is contained in:
Todd Kennedy 2019-06-13 15:11:45 -07:00 • committed by GitHub
parent c0eba77ba8
commit 3e094c95d5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/core/server/http/http_tools.ts
View file

@ -70,6 +70,7 @@ export function getServerOptions(config: HttpConfig, { configureTLS = true } = {
key: readFileSync(ssl.key!),
passphrase: ssl.keyPassphrase,
secureOptions: ssl.getSecureOptions(),
requestCert: ssl.requestCert,
};
options.tls = tlsOptions;

1
src/core/server/http/ssl_config.ts
View file

@ -68,6 +68,7 @@ export class SslConfig {
public certificate: string | undefined;
public certificateAuthorities: string[] | undefined;
public keyPassphrase: string | undefined;
public requestCert: boolean | undefined;
public cipherSuites: string[];
public supportedProtocols: string[];