Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not able to use jvm default cacerts trust store for hec https verification #441

Open
wangshu3000 opened this issue Sep 5, 2024 · 0 comments

Comments

@wangshu3000
Copy link

JRE default cacerts includes many publicly trusted ca cert.
I would like to use the default ca trust store provided by java.

But if the splunk.hec.ssl.validate.certs is set to true. There is a validation that the splunk.hec.ssl.trust.store.path also must be configured.
I can not unset the splunk.hec.ssl.trust.store.path parameter to use default cacert trust store.

The expected logic would be:
If splunk.hec.ssl.validate.certs is set to true, then:
    If splunk.hec.ssl.trust.store.path is configured, verify ssl using the trust store that specified
    If splunk.hec.ssl.trust.store.path is not configured or blank, verify ssl using cacert default trust store.
Else If splunk.hec.ssl.validate.certs is set to false, then:
    Skip all ssl verification

Please confirm if this makes sense, if it sounds good, i can raise a PR for it.
Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant