Commit Graph

9 Commits

Author SHA1 Message Date
Andreas Deininger 5f5a56ed01
docs: Fix typos (#14376) 2024-01-05 22:34:02 +01:00
Rajiv Kushwaha 7427ea33c7
feat(common.tls): Add support for passphrase-protected private key (#13262) 2023-06-01 10:04:59 +02:00
Sven Rebhan 9e519def51
feat(common.tls): add enable flag (#12727) 2023-02-27 11:22:40 -07:00
Joshua Powers 97826bdc73
chore: clean up all markdown lint errors in second half of docs directory (#10156) 2021-11-24 11:45:44 -07:00
Josef Johansson 76251d34f3
feat: plugins/common/tls/config.go: Filter client certificates by DNS names (#9910) 2021-10-25 08:47:26 -06:00
Andreas Fuchs 3c9c013f4b
common/tls: Allow specifying SNI hostnames (#7897)
* tls_config: Allow specifying SNI hostnames

Add a new configration field `tls_server_name` that allows specifying
the server name that'll be sent in the ClientHello when telegraf makes
a request to TLS servers. This allows checking against load balancers
responding to specific hostnames that otherwise wouldn't resolve to
their addresses.

Add the setting to the documentation of common TLS options, as well as
to the http_response plugin.

Fixes #7598.

* Adjust the x509_cert to allow usage of tls_server_name

This plugin has been using ServerName previously, and will have to
deal with the new setting, too: Extract the server-name choosing into
a method & add a test to ensure we choose the right value (and error
under the right circumstances). Also document that the two settings
are mutually exclusive.

* Improve documentation on what we try to accomplish in the nil return

Also get rid of the TODO, as I am fairly certain this behavior is the
correct one.

* Remove unused struct field in tests
2020-12-23 13:39:43 -06:00
Daniel Nelson d27f676091
Update to Go 1.14.3 with testing using 1.13.11 (#7564) 2020-05-26 15:40:25 -07:00
Daniel Nelson d5b41cfc9a
Update TLS documentation 2019-08-19 17:42:39 -07:00
Stanislav Putrya 149d221191 Add capability to limit TLS versions and cipher suites (#6246) 2019-08-19 16:01:01 -07:00