elastic / elastic/apm-agent-php

Allow Custom CA Certificates

Open
#430 1 comment 0 reactions 0 assignees View on GitHub
agent-php bug priority: medium triaged
Dominant language
PHP
Stars
268
Forks
86
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
Users who have custom certificate authorities in the chain are not able to use TLS validation, as there is no way to add more trusted CA certificates.

The Node agent has the option [serverCaCertFile](https://www.elastic.co/guide/en/apm/agent/nodejs/current/configuration.html#server-ca-cert-file), but the PHP agent does not have an equivalent option.

Disabling TLS verification is not an acceptable solution.

**To Reproduce**
Steps to reproduce the behavior:
1. Put the APM server behind a custom CA
2. Try to use the PHP Elastic APM Agent
3. Notice cert errors in the PHP logs
4. Try to find the option for custom CA certs
5. Fail to find such an option

**Expected behavior**
The agent should be usable with custom CAs in the chain without circumventing security.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.