Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allow setting of ssl_verification without ssl_key... #9

Merged
merged 1 commit into from
Oct 12, 2023

Conversation

ctippler
Copy link
Contributor

@ctippler ctippler commented Sep 15, 2023

Problem:

  • the ssl_verification is not considered if we don't define ssl_key/ssl_cert
  • fix docs because the ssl_verification is by default "true"

+ fix doc (ssl_verification is by default true)
@aryaantony92
Copy link

@ctippler May I know the reason for this change, i.e considering ssl_verification even if ssl_key and ssl_cert is not defined.

@ctippler
Copy link
Contributor Author

Hi sure,

the reason is that by default elasticsearch runs in https mode but the used certificate ist not a public/autorized certificate (so the ssl_verification will fail).

So in our configuration we don't have a ssl_key/ssl_cert defined, but we want to run it in https mode.

pimcore_elasticsearch_client:
    es_clients:
        default:
            hosts: ['https://localhost:9200']
            username: 'elastic'
            password: '%env(ELASTICSEARCH_PASSWORD)%'
            logger_channel: 'pimcore.elasicsearch'
            ssl_verification: false

Without the changes in this PR the ssl_verification: false is never set, so the connection won't work.

Regards,
Christian

@fashxp
Copy link
Member

fashxp commented Oct 6, 2023

@ctippler I see, but the quote

fix docs because now the ssl_verification is by default "true"

is not correct, right? It was already true by default, wasn't it?
So there should not be any change in default behavior.

@ctippler
Copy link
Contributor Author

Hi @fashxp ,
I changed "fix docs because now the ssl_verification is by default "true"" to "fix docs because the ssl_verification is by default "true". I just assumed that it has been "false" earlier days, but i don't know :-). At least now its true. So if you set up elasticsearch with a valid certificated it will run without problems (no change in the default behavior needed).

Regards,
Christian

@fashxp fashxp added this to the v1.0.1 milestone Oct 11, 2023
@fashxp fashxp changed the base branch from 1.x to 1.0 October 11, 2023 10:00
@fashxp
Copy link
Member

fashxp commented Oct 11, 2023

thx for clarification

@aryaantony92 aryaantony92 merged commit 50f6228 into pimcore:1.0 Oct 12, 2023
@aryaantony92
Copy link

@ctippler Thank you!

@github-actions github-actions bot locked and limited conversation to collaborators Oct 12, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants