Packetbeat TLS: Replace array fields with keyword

Use of `type: array` in some fields (which was inconsistent) causes
those fields to be excluded from the template. This prevents pointing
aliases to those fields, which we need in 7.6+.

Setting those fields to `keyword` explicitly so that they are included
in the template.

Fixes elastic#15588

packetbeat/docs/fields.asciidoc

@@ -9407,7 +9407,7 @@ type: keyword
 The list of compression methods the client supports. See https://www.iana.org/assignments/comp-meth-ids/comp-meth-ids.xhtml
 
 
-type: array
+type: keyword
 
 --
 
@@ -9538,7 +9538,7 @@ The hello extensions provided by the server.
 --
 Negotiated application layer protocol
 
-type: array
+type: keyword
 
 --
 
@@ -9658,7 +9658,7 @@ type: keyword
 --
 Subject Alternative Names for this certificate.
 
-type: array
+type: keyword
 
 --
 
@@ -9858,7 +9858,7 @@ type: keyword
 --
 Subject Alternative Names for this certificate.
 
-type: array
+type: keyword
 
 --
 
@@ -10595,24 +10595,6 @@ alias to: tls.detailed.server_certificate.issuer.locality
 
 --
 
-*`tls.server_certificate_chain`*::
-+
---
-type: alias
-
-alias to: tls.detailed.server_certificate_chain
-
---
-
-*`tls.client_certificate_chain`*::
-+
---
-type: alias
-
-alias to: tls.detailed.client_certificate_chain
-
---
-
 *`tls.alert_types`*::
 +
 --

packetbeat/protos/tls/_meta/fields.yml

@@ -44,7 +44,7 @@
                   connection with the client.
 
               - name: supported_compression_methods
-                type: array
+                type: keyword
                 description: >
                   The list of compression methods the client supports.
                   See https://www.iana.org/assignments/comp-meth-ids/comp-meth-ids.xhtml
@@ -123,7 +123,7 @@
                 description: The hello extensions provided by the server.
                 fields:
                   - name: application_layer_protocol_negotiation
-                    type: array
+                    type: keyword
                     description: Negotiated application layer protocol
 
                   - name: session_ticket
@@ -185,7 +185,7 @@
                   The algorithm used for the certificate's signature.
 
               - name: alternative_names
-                type: array
+                type: keyword
                 description: Subject Alternative Names for this certificate.
 
               - name: subject
@@ -281,7 +281,7 @@
                   The algorithm used for the certificate's signature.
 
               - name: alternative_names
-                type: array
+                type: keyword
                 description: Subject Alternative Names for this certificate.
 
               - name: subject
@@ -621,14 +621,6 @@
       type: alias
       path: tls.detailed.server_certificate.issuer.locality
 
-    - name: tls.server_certificate_chain
-      type: alias
-      path: tls.detailed.server_certificate_chain
-
-    - name: tls.client_certificate_chain
-      type: alias
-      path: tls.detailed.client_certificate_chain
-
     - name: tls.alert_types
       type: alias
       path: tls.detailed.alert_types