Skip to content

Commit 5782f82

Browse files
author
Ahren Stevens-Taylor
committed
Fix whitespacing
1 parent 5f77583 commit 5782f82

File tree

1 file changed

+13
-3
lines changed

1 file changed

+13
-3
lines changed

lib/logstash/outputs/tcp.rb

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,9 @@ class LogStash::Outputs::Tcp < LogStash::Outputs::Base
4242
# The SSL CA certificate, chainfile or CA path. The system CA path is automatically included.
4343
config :ssl_cacert, :validate => :path
4444

45+
# Do not perform TLS Mutal Authentication, only require a certificate for the client (only with :mode=>"client")
46+
config :ssl_mutual, :validate => :boolean, :default => true
47+
4548
# SSL certificate path
4649
config :ssl_cert, :validate => :path
4750

@@ -85,8 +88,11 @@ def setup_ssl
8588
require "openssl"
8689

8790
@ssl_context = OpenSSL::SSL::SSLContext.new
88-
@ssl_context.cert = OpenSSL::X509::Certificate.new(File.read(@ssl_cert))
89-
@ssl_context.key = OpenSSL::PKey::RSA.new(File.read(@ssl_key),@ssl_key_passphrase)
91+
92+
if @ssl_mutual
93+
@ssl_context.cert = OpenSSL::X509::Certificate.new(File.read(@ssl_cert))
94+
@ssl_context.key = OpenSSL::PKey::RSA.new(File.read(@ssl_key),@ssl_key_passphrase)
95+
end
9096
if @ssl_verify
9197
@cert_store = OpenSSL::X509::Store.new
9298
# Load the system default certificate path to the store
@@ -97,7 +103,11 @@ def setup_ssl
97103
@cert_store.add_file(@ssl_cacert)
98104
end
99105
@ssl_context.cert_store = @cert_store
100-
@ssl_context.verify_mode = OpenSSL::SSL::VERIFY_PEER|OpenSSL::SSL::VERIFY_FAIL_IF_NO_PEER_CERT
106+
if @ssl_mutual
107+
@ssl_context.verify_mode = OpenSSL::SSL::VERIFY_PEER|OpenSSL::SSL::VERIFY_FAIL_IF_NO_PEER_CERT
108+
else
109+
@ssl_context.verify_mode = OpenSSL::SSL::VERIFY_PEER
110+
end
101111
end
102112
end # def setup_ssl
103113

0 commit comments

Comments
 (0)