Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove deprecated SSL settings #182

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

robbavey
Copy link
Contributor

@robbavey robbavey commented Nov 13, 2024

This commit marks SSL settings obsolete that were previously marked as deprecated as part

of the SSL Settings Standardization process implemented in 3.7.0 of this plugin.

Marking these settings as obsolete is a breaking change that will stop the plugin from starting, and forces users to move to the new standard settings.

This commit makes the following configuration settings obsolete:

This commit cleans up some code to handle duplicate settings, and removes tests that were put in place to support the co-existence of deprecated and non-deprecated settings, replacing them with tests that verify that obsolete settings are identified early, and information about the deprecation is related to the user.

Thanks for contributing to Logstash! If you haven't already signed our CLA, here's a handy link:

Relates: #181

This commit marks SSL settings `obsolete` that were previously marked as `deprecated` as part

of the SSL Settings Standardization process implemented in `3.7.0` of this plugin.

Marking these settings as `obsolete` is a *breaking change* that will stop the plugin from starting, and forces users to move to the new standard settings.

This commit makes the following configuration settings obsolete:

This commit cleans up some code to handle duplicate settings, and removes tests that were put in place to support the co-existence of deprecated and non-deprecated settings, replacing them with tests that verify that obsolete settings are identified early, and information about the deprecation is related to the user.
# The maximum TLS version allowed for the encrypted connections. The value must be the one of the following:
# 1.0 for TLS 1.0, 1.1 for TLS 1.1, 1.2 for TLS 1.2, 1.3 for TLS 1.3
config :tls_max_version, :validate => :number, :default => TLS.max.version, :deprecated => "Set 'ssl_supported_protocols' instead."
# Obsolete Settings

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did we decide that doing validations on obsolete settings is potentially confusing to users. logstash-plugins/logstash-input-elasticsearch#213 (comment) (with the caveat that we still use obfuscated for sensitive data)?

Copy link

@donoghuc donoghuc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removal looks clean. The only open question/suggestion is consistency on whether we validate an obsolete parameter: #182 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove deprecated SSL settings from HTTP input
3 participants