search

puppetlabs / puppetlabs-splunk_hec

Apache License 2.0
9 stars 24 forks source link

(PE-33667) Add SSL config options for FIPS #186

Closed coreymbe closed 2 years ago

coreymbe commented 2 years ago

Summary

Currently Puppet::SSL::SSLContext defaults are loaded when utilizing splunk_hec as a Puppet subcommand (i.e. metrics collection). As a result self-signed certificates are unable to be verified and CRL checks occur.

Detailed Description

This commit adds the option to flip verify_peer as well as certificate_revocation to false (defaulting to true) within the module so the options are passed in when the POST request is made.

Checklist

[X] Ensure README is updated [X] Any changes to existing documentation [X] Anything new added [X] Review Support Playbook for any needed updates [X] PR title is "(Ticket|Maint) Short Description" [X] Commit title matches PR title

puppet-community-rangefinder[bot] commented 2 years ago

splunk_hec is a class

that may have no external impact to Forge modules.

This module is declared in 2 of 579 indexed public Puppetfiles.

These results were generated with Rangefinder, a tool that helps predict the downstream impact of breaking changes to elements used in Puppet modules. You can run this on the command line to get a full report.

Exact matches are those that we can positively identify via namespace and the declaring modules' metadata. Non-namespaced items, such as Puppet 3.x functions, will always be reported as near matches only.