Browse Source

SONAR-14854 Support TLSv1.3,TLSv1.2 for Elasticsearch transport connection encryption

tags/9.0.0.45539
Jacek 2 years ago
parent
commit
fda0ba7738

+ 1
- 0
server/sonar-main/src/main/java/org/sonar/application/es/EsSettings.java View File

@@ -118,6 +118,7 @@ public class EsSettings {

builder.put("xpack.security.enabled", "true");
builder.put("xpack.security.transport.ssl.enabled", "true");
builder.put("xpack.security.transport.ssl.supported_protocols", "TLSv1.3,TLSv1.2");
builder.put("xpack.security.transport.ssl.verification_mode", "certificate");
builder.put("xpack.security.transport.ssl.keystore.path", clusterESKeystoreFileName);
builder.put("xpack.security.transport.ssl.truststore.path", clusterESTruststoreFileName);

+ 3
- 1
server/sonar-main/src/test/java/org/sonar/application/es/EsSettingsTest.java View File

@@ -390,7 +390,9 @@ public class EsSettingsTest {

Map<String, String> outputParams = settings.build();

assertThat(outputParams).containsEntry("xpack.security.transport.ssl.enabled", "true")
assertThat(outputParams)
.containsEntry("xpack.security.transport.ssl.enabled", "true")
.containsEntry("xpack.security.transport.ssl.supported_protocols", "TLSv1.3,TLSv1.2")
.containsEntry("xpack.security.transport.ssl.keystore.path", keystore.getName())
.containsEntry("xpack.security.transport.ssl.truststore.path", truststore.getName());
}

Loading…
Cancel
Save