Skip to content

Commit 6f3355c

Browse files
author
Steffen Siering
authored
Fix supported ssl protocols in default configs (#15760)
1 parent d39060d commit 6f3355c

13 files changed

Lines changed: 228 additions & 228 deletions

File tree

‎auditbeat/auditbeat.reference.yml‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -485,9 +485,9 @@ output.elasticsearch:
485485
# `full`.
486486
#ssl.verification_mode: full
487487

488-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
489-
# 1.2 are enabled.
490-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
488+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
489+
# up to 1.3 are enabled.
490+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
491491

492492
# List of root certificates for HTTPS server verifications
493493
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
@@ -577,9 +577,9 @@ output.elasticsearch:
577577
# `full`.
578578
#ssl.verification_mode: full
579579

580-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
581-
# 1.2 are enabled.
582-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
580+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
581+
# up to 1.3 are enabled.
582+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
583583

584584
# Optional SSL configuration options. SSL is off by default.
585585
# List of root certificates for HTTPS server verifications
@@ -750,9 +750,9 @@ output.elasticsearch:
750750
# `full`.
751751
#ssl.verification_mode: full
752752

753-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
754-
# 1.2 are enabled.
755-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
753+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
754+
# up to 1.3 are enabled.
755+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
756756

757757
# Certificate for SSL client authentication
758758
#ssl.certificate: "/etc/pki/client/cert.pem"
@@ -862,9 +862,9 @@ output.elasticsearch:
862862
# `full`.
863863
#ssl.verification_mode: full
864864

865-
# List of supported/valid TLS versions. By default all TLS versions 1.0 up to
866-
# 1.2 are enabled.
867-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
865+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
866+
# up to 1.3 are enabled.
867+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
868868

869869
# Optional SSL configuration options. SSL is off by default.
870870
# List of root certificates for HTTPS server verifications
@@ -1131,9 +1131,9 @@ setup.kibana:
11311131
# `full`.
11321132
#ssl.verification_mode: full
11331133

1134-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1135-
# 1.2 are enabled.
1136-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1134+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1135+
# up to 1.3 are enabled.
1136+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
11371137

11381138
# SSL configuration. The default is off.
11391139
# List of root certificates for HTTPS server verifications
@@ -1307,9 +1307,9 @@ logging.files:
13071307
# `full`.
13081308
#ssl.verification_mode: full
13091309

1310-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1311-
# 1.2 are enabled.
1312-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1310+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1311+
# up to 1.3 are enabled.
1312+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
13131313

13141314
# SSL configuration. The default is off.
13151315
# List of root certificates for HTTPS server verifications

‎filebeat/filebeat.reference.yml‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1182,9 +1182,9 @@ output.elasticsearch:
11821182
# `full`.
11831183
#ssl.verification_mode: full
11841184

1185-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1186-
# 1.2 are enabled.
1187-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1185+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1186+
# up to 1.3 are enabled.
1187+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
11881188

11891189
# List of root certificates for HTTPS server verifications
11901190
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
@@ -1274,9 +1274,9 @@ output.elasticsearch:
12741274
# `full`.
12751275
#ssl.verification_mode: full
12761276

1277-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1278-
# 1.2 are enabled.
1279-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1277+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1278+
# up to 1.3 are enabled.
1279+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
12801280

12811281
# Optional SSL configuration options. SSL is off by default.
12821282
# List of root certificates for HTTPS server verifications
@@ -1447,9 +1447,9 @@ output.elasticsearch:
14471447
# `full`.
14481448
#ssl.verification_mode: full
14491449

1450-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1451-
# 1.2 are enabled.
1452-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1450+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1451+
# up to 1.3 are enabled.
1452+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
14531453

14541454
# Certificate for SSL client authentication
14551455
#ssl.certificate: "/etc/pki/client/cert.pem"
@@ -1559,9 +1559,9 @@ output.elasticsearch:
15591559
# `full`.
15601560
#ssl.verification_mode: full
15611561

1562-
# List of supported/valid TLS versions. By default all TLS versions 1.0 up to
1563-
# 1.2 are enabled.
1564-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1562+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1563+
# up to 1.3 are enabled.
1564+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
15651565

15661566
# Optional SSL configuration options. SSL is off by default.
15671567
# List of root certificates for HTTPS server verifications
@@ -1828,9 +1828,9 @@ setup.kibana:
18281828
# `full`.
18291829
#ssl.verification_mode: full
18301830

1831-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1832-
# 1.2 are enabled.
1833-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1831+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1832+
# up to 1.3 are enabled.
1833+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
18341834

18351835
# SSL configuration. The default is off.
18361836
# List of root certificates for HTTPS server verifications
@@ -2004,9 +2004,9 @@ logging.files:
20042004
# `full`.
20052005
#ssl.verification_mode: full
20062006

2007-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
2008-
# 1.2 are enabled.
2009-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
2007+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
2008+
# up to 1.3 are enabled.
2009+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
20102010

20112011
# SSL configuration. The default is off.
20122012
# List of root certificates for HTTPS server verifications

‎heartbeat/heartbeat.reference.yml‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -629,9 +629,9 @@ output.elasticsearch:
629629
# `full`.
630630
#ssl.verification_mode: full
631631

632-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
633-
# 1.2 are enabled.
634-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
632+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
633+
# up to 1.3 are enabled.
634+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
635635

636636
# List of root certificates for HTTPS server verifications
637637
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
@@ -721,9 +721,9 @@ output.elasticsearch:
721721
# `full`.
722722
#ssl.verification_mode: full
723723

724-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
725-
# 1.2 are enabled.
726-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
724+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
725+
# up to 1.3 are enabled.
726+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
727727

728728
# Optional SSL configuration options. SSL is off by default.
729729
# List of root certificates for HTTPS server verifications
@@ -894,9 +894,9 @@ output.elasticsearch:
894894
# `full`.
895895
#ssl.verification_mode: full
896896

897-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
898-
# 1.2 are enabled.
899-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
897+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
898+
# up to 1.3 are enabled.
899+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
900900

901901
# Certificate for SSL client authentication
902902
#ssl.certificate: "/etc/pki/client/cert.pem"
@@ -1006,9 +1006,9 @@ output.elasticsearch:
10061006
# `full`.
10071007
#ssl.verification_mode: full
10081008

1009-
# List of supported/valid TLS versions. By default all TLS versions 1.0 up to
1010-
# 1.2 are enabled.
1011-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1009+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1010+
# up to 1.3 are enabled.
1011+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
10121012

10131013
# Optional SSL configuration options. SSL is off by default.
10141014
# List of root certificates for HTTPS server verifications
@@ -1275,9 +1275,9 @@ setup.kibana:
12751275
# `full`.
12761276
#ssl.verification_mode: full
12771277

1278-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1279-
# 1.2 are enabled.
1280-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1278+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1279+
# up to 1.3 are enabled.
1280+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
12811281

12821282
# SSL configuration. The default is off.
12831283
# List of root certificates for HTTPS server verifications
@@ -1451,9 +1451,9 @@ logging.files:
14511451
# `full`.
14521452
#ssl.verification_mode: full
14531453

1454-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1455-
# 1.2 are enabled.
1456-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1454+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1455+
# up to 1.3 are enabled.
1456+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
14571457

14581458
# SSL configuration. The default is off.
14591459
# List of root certificates for HTTPS server verifications

‎journalbeat/journalbeat.reference.yml‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -423,9 +423,9 @@ output.elasticsearch:
423423
# `full`.
424424
#ssl.verification_mode: full
425425

426-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
427-
# 1.2 are enabled.
428-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
426+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
427+
# up to 1.3 are enabled.
428+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
429429

430430
# List of root certificates for HTTPS server verifications
431431
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
@@ -515,9 +515,9 @@ output.elasticsearch:
515515
# `full`.
516516
#ssl.verification_mode: full
517517

518-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
519-
# 1.2 are enabled.
520-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
518+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
519+
# up to 1.3 are enabled.
520+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
521521

522522
# Optional SSL configuration options. SSL is off by default.
523523
# List of root certificates for HTTPS server verifications
@@ -688,9 +688,9 @@ output.elasticsearch:
688688
# `full`.
689689
#ssl.verification_mode: full
690690

691-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
692-
# 1.2 are enabled.
693-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
691+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
692+
# up to 1.3 are enabled.
693+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
694694

695695
# Certificate for SSL client authentication
696696
#ssl.certificate: "/etc/pki/client/cert.pem"
@@ -800,9 +800,9 @@ output.elasticsearch:
800800
# `full`.
801801
#ssl.verification_mode: full
802802

803-
# List of supported/valid TLS versions. By default all TLS versions 1.0 up to
804-
# 1.2 are enabled.
805-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
803+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
804+
# up to 1.3 are enabled.
805+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
806806

807807
# Optional SSL configuration options. SSL is off by default.
808808
# List of root certificates for HTTPS server verifications
@@ -1069,9 +1069,9 @@ setup.kibana:
10691069
# `full`.
10701070
#ssl.verification_mode: full
10711071

1072-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1073-
# 1.2 are enabled.
1074-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1072+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1073+
# up to 1.3 are enabled.
1074+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
10751075

10761076
# SSL configuration. The default is off.
10771077
# List of root certificates for HTTPS server verifications
@@ -1245,9 +1245,9 @@ logging.files:
12451245
# `full`.
12461246
#ssl.verification_mode: full
12471247

1248-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1249-
# 1.2 are enabled.
1250-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1248+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1249+
# up to 1.3 are enabled.
1250+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
12511251

12521252
# SSL configuration. The default is off.
12531253
# List of root certificates for HTTPS server verifications

‎libbeat/_meta/config.reference.yml.tmpl‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -366,9 +366,9 @@ output.elasticsearch:
366366
# `full`.
367367
#ssl.verification_mode: full
368368
369-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
370-
# 1.2 are enabled.
371-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
369+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
370+
# up to 1.3 are enabled.
371+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
372372
373373
# List of root certificates for HTTPS server verifications
374374
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
@@ -458,9 +458,9 @@ output.elasticsearch:
458458
# `full`.
459459
#ssl.verification_mode: full
460460
461-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
462-
# 1.2 are enabled.
463-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
461+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
462+
# up to 1.3 are enabled.
463+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
464464
465465
# Optional SSL configuration options. SSL is off by default.
466466
# List of root certificates for HTTPS server verifications
@@ -631,9 +631,9 @@ output.elasticsearch:
631631
# `full`.
632632
#ssl.verification_mode: full
633633
634-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
635-
# 1.2 are enabled.
636-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
634+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
635+
# up to 1.3 are enabled.
636+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
637637
638638
# Certificate for SSL client authentication
639639
#ssl.certificate: "/etc/pki/client/cert.pem"
@@ -743,9 +743,9 @@ output.elasticsearch:
743743
# `full`.
744744
#ssl.verification_mode: full
745745
746-
# List of supported/valid TLS versions. By default all TLS versions 1.0 up to
747-
# 1.2 are enabled.
748-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
746+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
747+
# up to 1.3 are enabled.
748+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
749749
750750
# Optional SSL configuration options. SSL is off by default.
751751
# List of root certificates for HTTPS server verifications
@@ -1012,9 +1012,9 @@ setup.kibana:
10121012
# `full`.
10131013
#ssl.verification_mode: full
10141014
1015-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1016-
# 1.2 are enabled.
1017-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1015+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1016+
# up to 1.3 are enabled.
1017+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
10181018
10191019
# SSL configuration. The default is off.
10201020
# List of root certificates for HTTPS server verifications
@@ -1188,9 +1188,9 @@ logging.files:
11881188
# `full`.
11891189
#ssl.verification_mode: full
11901190
1191-
# List of supported/valid TLS versions. By default all TLS versions from 1.0 up to
1192-
# 1.2 are enabled.
1193-
#ssl.supported_protocols: [TLSv1.0, TLSv1.1, TLSv1.2]
1191+
# List of supported/valid TLS versions. By default all TLS versions from 1.1
1192+
# up to 1.3 are enabled.
1193+
#ssl.supported_protocols: [TLSv1.1, TLSv1.2, TLSv1.3]
11941194
11951195
# SSL configuration. The default is off.
11961196
# List of root certificates for HTTPS server verifications

0 commit comments

Comments
 (0)