Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cannot report to ES cluster with self-signed certificate or in-house certificate authority #413

Closed
kesslerm opened this issue Feb 9, 2018 · 1 comment
Closed

Cannot report to ES cluster with self-signed certificate or in-house certificate authority #413

kesslerm opened this issue Feb 9, 2018 · 1 comment
Labels
enhancement Improves the status quo :Metrics How metrics are stored, calculated or aggregated
Milestone
0.9.2

Comments

@kesslerm
Copy link
Contributor

kesslerm commented Feb 9, 2018

The metrics module fails to connect to the Elasticsearch metrics store, if secure transport is used and the server has a self signed certificate or a certificate signed by a certificate authority that's not in the certificate store provided by certifi.
@danielmitterdorfer
Copy link
Member

We probably need to enhance the metrics store configuration to allow passing these options. I would not go so far as to ask the user for a custom certificate in Rally's setup routine but we should probably allow to configure a custom certificate directly in the config file.

@danielmitterdorfer danielmitterdorfer added enhancement Improves the status quo help wanted We'd be happy about a community contribution :Metrics How metrics are stored, calculated or aggregated labels Feb 9, 2018
@danielmitterdorfer danielmitterdorfer added this to the Backlog milestone Feb 9, 2018
kesslerm added a commit to kesslerm/rally that referenced this issue Feb 9, 2018
@kesslerm
Fix connection to servers with self-signed certificates or unknown ce…
6a702cc 
…rtificate authority

The metrics module fails to connect to the Elasticsearch metrics store,
if secure transport is used and the server has a self signed certificate
or a certificate signed by a certificate authority that's not in the
certificate store provided by `certifi`.

+ Introduce a non-mandatory setting that allows turning off certificate verification.
+ Introduce a non-mandatroy setting to override the ca_certs certificate store.

Fixes elastic#413
@kesslerm kesslerm mentioned this issue Feb 9, 2018
Merged
danielmitterdorfer pushed a commit that referenced this issue Feb 19, 2018
@kesslerm @danielmitterdorfer
Fix connection to servers with self-signed certificates or unknown ce…
f04638a 
…rtificate authority

The metrics module fails to connect to the Elasticsearch metrics store,
if secure transport is used and the server has a self signed certificate
or a certificate signed by a certificate authority that's not in the
certificate store provided by `certifi`.

+ Introduce a non-mandatory setting that allows turning off certificate verification.
+ Introduce a non-mandatroy setting to override the ca_certs certificate store.

Fixes #413
@danielmitterdorfer danielmitterdorfer modified the milestones: Backlog, 0.9.2 Feb 19, 2018
@danielmitterdorfer danielmitterdorfer removed the help wanted We'd be happy about a community contribution label Feb 19, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement Improves the status quo :Metrics How metrics are stored, calculated or aggregated
Projects
None yet
Milestone
0.9.2
Development

No branches or pull requests
2 participants
@danielmitterdorfer @kesslerm