Module: Fluent::TLS

Defined in:
lib/fluent/tls.rb

Constant Summary collapse

DEFAULT_VERSION = 
:'TLSv1_2'
SUPPORTED_VERSIONS = 
if defined?(OpenSSL::SSL::TLS1_3_VERSION)
  [:'TLSv1_1', :'TLSv1_2', :'TLSv1_3', :'TLS1_1', :'TLS1_2', :'TLS1_3'].freeze
else
  [:'TLSv1_1', :'TLSv1_2', :'TLS1_1', :'TLS1_2'].freeze
end
CIPHERS_DEFAULT =

follow httpclient configuration by nahi OpenSSL 0.9.8 default: “ALL:!ADH:!LOW:!EXP:!MD5:+SSLv2:@STRENGTH”

"ALL:!aNULL:!eNULL:!SSLv2".freeze

Class Method Summary collapse

Class Method Details

.set_version_to_context(ctx, version, min_version, max_version) ⇒ Object

Helper for old syntax/method support: ruby 2.4 uses ssl_version= but this method is now deprecated. min_version=/max_version= use ‘TLS1_2’ but ssl_version= uses ‘TLSv1_2’



56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
 
# File 'lib/fluent/tls.rb', line 56

def set_version_to_context(ctx, version, min_version, max_version)
  if MIN_MAX_AVAILABLE
    case
    when min_version.nil? && max_version.nil?
      min_version = METHODS_MAP[version] || version
      max_version = METHODS_MAP[version] || version
    when min_version.nil? && max_version
      raise Fluent::ConfigError, "When you set max_version, must set min_version together"
    when min_version && max_version.nil?
      raise Fluent::ConfigError, "When you set min_version, must set max_version together"
    else
      min_version = METHODS_MAP[min_version] || min_version
      max_version = METHODS_MAP[max_version] || max_version
    end
    ctx.min_version = min_version
    ctx.max_version = max_version
  else
    ctx.ssl_version = METHODS_MAP[version] || version
  end

  ctx
end