OpenSearch/x-pack/plugin/security
Tim Vernum e6f530c167
Improved diagnostics for TLS trust failures (#49669)
- Improves HTTP client hostname verification failure messages
- Adds "DiagnosticTrustManager" which logs certificate information
  when trust cannot be established (hostname failure, CA path failure,
  etc)

These diagnostic messages are designed so that many common TLS
problems can be diagnosed based solely (or primarily) on the
elasticsearch logs.

These diagnostics can be disabled by setting

     xpack.security.ssl.diagnose.trust: false

Backport of: #48911
2019-11-29 15:01:20 +11:00
..
cli Apply 2-space indent to all gradle scripts (#49071) 2019-11-14 11:01:23 +00:00
forbidden Add an OpenID Connect authentication realm (#40674) (#41178) 2019-04-15 12:41:16 +03:00
licenses [7.x] Update opensaml dependency (#44972) (#49512) 2019-11-29 00:17:16 +02:00
qa Improved diagnostics for TLS trust failures (#49669) 2019-11-29 15:01:20 +11:00
src Improved diagnostics for TLS trust failures (#49669) 2019-11-29 15:01:20 +11:00
build.gradle [7.x] Update opensaml dependency (#44972) (#49512) 2019-11-29 00:17:16 +02:00