From 7cede25fa49b53544687940d464f7d04198d1073 Mon Sep 17 00:00:00 2001 From: Nicholas George Date: Tue, 31 Jan 2017 15:42:20 +0000 Subject: [PATCH] Simple fix to make the input not set the CAs when the verifymode is set to none --- lib/logstash/inputs/beats.rb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/logstash/inputs/beats.rb b/lib/logstash/inputs/beats.rb index 3c0c54a0..76b971d5 100644 --- a/lib/logstash/inputs/beats.rb +++ b/lib/logstash/inputs/beats.rb @@ -190,7 +190,9 @@ def create_server if @ssl_verify_mode.upcase == "FORCE_PEER" ssl_builder.setVerifyMode(org.logstash.netty.SslSimpleBuilder::SslClientVerifyMode::FORCE_PEER) end - ssl_builder.setCertificateAuthorities(@ssl_certificate_authorities) + if @ssl_verify_mode.upcase != "NONE" + ssl_builder.setCertificateAuthorities(@ssl_certificate_authorities) + end end server.enableSSL(ssl_builder)