The suggested change adds support for client authentication against ElasticSearch
Description
X-Pack or SearchGuard can be configured to demand client certificate for authentication of ElasticSearch API clients.
The suggested change would be to support two new application.py command-line parameters, --client_cert and --client-key. They are file paths of public key certificate (PEM) and key files.
The change is trivial as the underlying implementation (vendor/ElasticSearch) already supports it, the parameters simply need to be passed downstream.
PR Details
The suggested change adds support for client authentication against ElasticSearch
Description
X-Pack or SearchGuard can be configured to demand client certificate for authentication of ElasticSearch API clients. The suggested change would be to support two new application.py command-line parameters, --client_cert and --client-key. They are file paths of public key certificate (PEM) and key files. The change is trivial as the underlying implementation (vendor/ElasticSearch) already supports it, the parameters simply need to be passed downstream.