github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-06-28 11:05:39 -04:00
Code Issues Projects Releases Packages Wiki Activity

Remove default support for TLS v1.0 and v1.1 (#90511)

Browse source 
Co-authored-by: Tyler Smalley <tylersmalley@me.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
This commit is contained in:
Jonathan Budzenski 2021-03-31 10:04:34 -05:00 • committed by GitHub
parent 5f487292fb
commit 589f49f442
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/migration/migrate_8_0.asciidoc
View file

@ -320,6 +320,15 @@ All supported operating systems support using systemd service files. Any system
*Impact:* *Impact:*
Any installations using `.deb` or `.rpm` packages using SysV will need to migrate to systemd. Any installations using `.deb` or `.rpm` packages using SysV will need to migrate to systemd.
[float]
=== TLS v1.0 and v1.1 are disabled by default
*Details:*
Support can be re-enabled by setting `--tls-min-1.0` in the `node.options` config file that can be found inside `kibana/config` folder or any other configured with the environment variable `KBN_PATH_CONF` (for example in Debian based system would be `/etc/kibana`).
*Impact:*
Browser and proxy clients communicating over TLS v1.0 and v1.1.
[float] [float]
=== Platform removed from root folder name for `.tar.gz` and `.zip` archives === Platform removed from root folder name for `.tar.gz` and `.zip` archives

2
src/dev/build/tasks/bin/scripts/kibana
View file

@ -26,4 +26,4 @@ if [ -f "${CONFIG_DIR}/node.options" ]; then
KBN_NODE_OPTS="$(grep -v ^# < ${CONFIG_DIR}/node.options | xargs)" KBN_NODE_OPTS="$(grep -v ^# < ${CONFIG_DIR}/node.options | xargs)"
fi fi
NODE_OPTIONS="--no-warnings --max-http-header-size=65536 --tls-min-v1.0 $KBN_NODE_OPTS $NODE_OPTIONS" NODE_ENV=production exec "${NODE}" "${DIR}/src/cli/dist" ${@} NODE_OPTIONS="--no-warnings --max-http-header-size=65536 $KBN_NODE_OPTS $NODE_OPTIONS" NODE_ENV=production exec "${NODE}" "${DIR}/src/cli/dist" ${@}