{"action":"opened","issue":{"url":"https://api.github.com/repos/logstash-plugins/logstash-output-http/issues/21","labels_url":"https://api.github.com/repos/logstash-plugins/logstash-output-http/issues/21/labels{/name}","comments_url":"https://api.github.com/repos/logstash-plugins/logstash-output-http/issues/21/comments","events_url":"https://api.github.com/repos/logstash-plugins/logstash-output-http/issues/21/events","html_url":"https://github.com/logstash-plugins/logstash-output-http/issues/21","id":108631546,"number":21,"title":"Issues with SSL certificate validation in logstash output http plugin ","user":{"login":"suraj-kamath","id":12824518,"avatar_url":"https://avatars.githubusercontent.com/u/12824518?v=3","gravatar_id":"","url":"https://api.github.com/users/suraj-kamath","html_url":"https://github.com/suraj-kamath","followers_url":"https://api.github.com/users/suraj-kamath/followers","following_url":"https://api.github.com/users/suraj-kamath/following{/other_user}","gists_url":"https://api.github.com/users/suraj-kamath/gists{/gist_id}","starred_url":"https://api.github.com/users/suraj-kamath/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/suraj-kamath/subscriptions","organizations_url":"https://api.github.com/users/suraj-kamath/orgs","repos_url":"https://api.github.com/users/suraj-kamath/repos","events_url":"https://api.github.com/users/suraj-kamath/events{/privacy}","received_events_url":"https://api.github.com/users/suraj-kamath/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-09-28T10:42:59Z","updated_at":"2015-09-28T10:42:59Z","closed_at":null,"body":"There are two issues:\r\n1. ssl_certificate_validation option is not taking effect. Irrespective of whether we give the value as true or false, it is always taken as true.\r\n\r\n2. During SSL certification validation, logstash is doing a strict host name check. As part of this, it is not supporting wildcard certificates where CN is like *.subdomain.domain.com. Either this needs to be fixed or it would be ideal to have another option to the http plugin like, for example, \"strict_host name_check\" which can be set to true or false.\r\n\r\nLogstash version :1.5.4\r\nHttp plugin version :1.1.0\r\njava : 1.8.0_51.\r\n\r\n"}}