Graylog2 / Graylog2/graylog2-server

make AMQP SSL connection trust every certificate optional

Open
#4,461 1 comment 0 reactions 0 assignees View on GitHub
#S feature improvement triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## Expected Behavior
Like with any other Input that can be used with SSL it should be possible to tell if the certificate must be valid or not.

## Current Behavior
any certificate can be used - see log message

```
2018-01-05T16:21:44.120+01:00 INFO [AmqpConsumer] Enabling TLS for AMQP input [Syslog AMQP/5a4f97bb221ae10d142537f4].
2018-01-05T16:21:44.120+01:00 WARN [TrustEverythingTrustManager] This trust manager trusts every certificate, effectively disabling peer verification. This is convenient for local development but prone to man-in-the-middle attacks. Please see http://www.rabbitmq.com/ssl.html#validating-cerficates to learn more about peer certificate validation.
2018-01-05T16:21:44.128+01:00 INFO [InputStateListener] Input [Syslog AMQP/5a4f97bb221ae10d142537f4] is now STARTING
```

## Your Environment

* Graylog Version: 2.4

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.