Skip to content
This repository was archived by the owner on Jun 26, 2023. It is now read-only.

Commit 74b4c6b

Browse files
committed
mark deprecated ssl_cacert option as obsolete
1 parent 712b315 commit 74b4c6b

File tree

3 files changed

+2
-17
lines changed

3 files changed

+2
-17
lines changed

CHANGELOG.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
## 6.0.0
2-
- Mark deprecated :data_timeout option as obsolete
2+
- Mark deprecated :data_timeout and :ssl_cacert options as obsolete
33

44
## 5.0.0
55
- Changed the behaviour of the `host` field to contain the resolved peer hostname for a connection instead of its peer IP

docs/index.asciidoc

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -131,15 +131,6 @@ When mode is `client`, the port to connect to.
131131
Proxy protocol support, only v1 is supported at this time
132132
http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
133133

134-
[id="plugins-{type}s-{plugin}-ssl_cacert"]
135-
===== `ssl_cacert` (DEPRECATED)
136-
137-
* DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
138-
* Value type is <<path,path>>
139-
* There is no default value for this setting.
140-
141-
The SSL CA certificate, chainfile or CA path. The system CA path is automatically included.
142-
143134
[id="plugins-{type}s-{plugin}-ssl_cert"]
144135
===== `ssl_cert`
145136

lib/logstash/inputs/tcp.rb

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -90,8 +90,7 @@ class LogStash::Inputs::Tcp < LogStash::Inputs::Base
9090
# For input, sets the field `sslsubject` to that of the client certificate.
9191
config :ssl_verify, :validate => :boolean, :default => true
9292

93-
# The SSL CA certificate, chainfile or CA path. The system CA path is automatically included.
94-
config :ssl_cacert, :validate => :path, :deprecated => "This setting is deprecated in favor of ssl_extra_chain_certs as it sets a more clear expectation to add more X509 certificates to the store"
93+
config :ssl_cacert, :validate => :path, :obsolete => "This setting is obsolete. Use ssl_extra_chain_certs instead"
9594

9695
# SSL certificate path
9796
config :ssl_cert, :validate => :path
@@ -314,11 +313,6 @@ def ssl_context
314313
def load_cert_store
315314
cert_store = OpenSSL::X509::Store.new
316315
cert_store.set_default_paths
317-
if File.directory?(@ssl_cacert)
318-
cert_store.add_path(@ssl_cacert)
319-
else
320-
cert_store.add_file(@ssl_cacert)
321-
end if @ssl_cacert
322316
@ssl_extra_chain_certs.each do |cert|
323317
cert_store.add_file(cert)
324318
end

0 commit comments

Comments
 (0)