On 2018/05/03 15:54, Sebastian Reitenbach wrote:
> Hi,
>
> Am Freitag, April 27, 2018 13:58 CEST, Pavel Korovin <p...@tristero.se>
> schrieb:
>
> > Dear all,
> >
> > Please find updates for
> > sysutils/logstash
> > textproc/elasticsearch
> > www/kibana
> > and new sysutils/x-pack port attached.
>
>
> I installed/updated all but the x-pack, but I still don't get logstash
> starting up with beats plugin with SSL enabled,
> seems I still hit:
> https://github.com/logstash-plugins/logstash-input-beats/issues/188
"still" -> sounds like this isn't any worse with the updates?
> Here's my beats input config snippet, otherwise, using more or less the
> defaults that the updated package installs:
>
> cat /etc/logstash/conf.d/filebeat.yml
>
>
> input {
> beats {
> host => "127.0.0.1"
> port => 12364
> ssl => true
> ssl_certificate => "/etc/logstash/logstash.crt"
> ssl_key => "/etc/logstash/logstash.key"
> ssl_certificate_authorities => [ "/etc/logstash/logstash-ca.crt" ]
> ssl_verify_mode => "force_peer"
> cipher_suites => [ 'TLS_RSA_WITH_AES_256_CBC_SHA' ]
> # cipher_suites => [ 'TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256' ]
> }
> }
> ...
>
>
> I tried to play with different ciphers, but to no avail. Some more info I
> added to the issue mentioned above.
> But maybe I'm missing something obvious, so if someone gets the beats input
> to work with SSL I'm all ears
I'm not using any of this stuff, but could this be as simple as having
to build OpenBSD .so files for netty-tcnative (similar to what I'm having
to do for snappy-java with net/unifi)?
