Commit Graph

14 Commits

Author SHA1 Message Date
Rajiv Kushwaha 7427ea33c7
feat(common.tls): Add support for passphrase-protected private key (#13262) 2023-06-01 10:04:59 +02:00
Sven Rebhan 9e519def51
feat(common.tls): add enable flag (#12727) 2023-02-27 11:22:40 -07:00
Thomas Casteleyn 6a2f6f301f
chore: eliminate unnecessary use of quoted strings in printf (#12722) 2023-02-23 06:49:36 -07:00
Paweł Żak 4201f24020
chore: Fix linter findings for errorlint (part2) (#12702)
Co-authored-by: Pawel Zak <Pawel Zak>
2023-02-22 12:08:46 +01:00
Joshua Powers da0c186a71
feat(tls): allow setting renegotiation method (#12302) 2022-12-06 20:09:58 -07:00
Paweł Żak 6816aefcd5
chore: fix linter findings for unparam and revive.unused-parameter (#12150) 2022-11-08 12:04:12 -07:00
Sebastian Spaink f38c9f2a45
chore: Resolve deprecated linter issues (#12051) 2022-10-19 18:32:53 +02:00
Sven Rebhan e96bbe83c5
feat(common.tls): Implement minimum TLS version for clients (#11493) 2022-08-09 13:36:47 +02:00
Thomas Casteleyn a4f6b27bd5
style: Add deprecation notices to plugin options (#10616) 2022-03-01 15:05:53 -07:00
bustedware 7d6672c53a
feat: add mongodb output plugin (#9923) 2021-10-28 14:42:49 -06:00
Josef Johansson 76251d34f3
feat: plugins/common/tls/config.go: Filter client certificates by DNS names (#9910) 2021-10-25 08:47:26 -06:00
Eng Zer Jun 6a3b27126a
refactor: move from io/ioutil to io and os package (#9811) 2021-09-28 15:16:32 -06:00
Andreas Fuchs 3c9c013f4b
common/tls: Allow specifying SNI hostnames (#7897)
* tls_config: Allow specifying SNI hostnames

Add a new configration field `tls_server_name` that allows specifying
the server name that'll be sent in the ClientHello when telegraf makes
a request to TLS servers. This allows checking against load balancers
responding to specific hostnames that otherwise wouldn't resolve to
their addresses.

Add the setting to the documentation of common TLS options, as well as
to the http_response plugin.

Fixes #7598.

* Adjust the x509_cert to allow usage of tls_server_name

This plugin has been using ServerName previously, and will have to
deal with the new setting, too: Extract the server-name choosing into
a method & add a test to ensure we choose the right value (and error
under the right circumstances). Also document that the two settings
are mutually exclusive.

* Improve documentation on what we try to accomplish in the nil return

Also get rid of the TODO, as I am fairly certain this behavior is the
correct one.

* Remove unused struct field in tests
2020-12-23 13:39:43 -06:00
Daniel Nelson c73ed8ca6c
Export internal/tls package for use in execd plugins (#7697) 2020-06-25 11:44:22 -07:00