TLS connections by IP address to servers with self-signed certificates

jasonish / evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

https://evebox.org/

MIT License

432 stars 67 forks source link

TLS connections by IP address to servers with self-signed certificates #148

Closed jasonish closed 9 months ago

jasonish commented 4 years ago

Due to an issue in dependency libraries, EveBox cannot connect to an Elasticsearch server using TLS by IP address. It must use a hostname. While untested, this probably applied to the EveBox Agent connecting to an EveBox server as well.

References:

https://github.com/ctz/hyper-rustls/issues/84
https://github.com/ctz/rustls/issues/184

One solution is to use OpenSSL instead of Rustls, but that will make building the static binaries more difficule.

jasonish commented 9 months ago

Does not appear to be an issue anymore.