Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added guide for configuring ssl_assert_hostname #694

Merged
merged 1 commit into from
Mar 19, 2024

Conversation

saimedhi
Copy link
Collaborator

Description

Added guide for configuring ssl_assert_hostname

Issues Resolved

Relevant to PR

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Copy link

codecov bot commented Mar 11, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 72.14%. Comparing base (d36a882) to head (0005ecf).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #694   +/-   ##
=======================================
  Coverage   72.14%   72.14%           
=======================================
  Files          89       89           
  Lines        7945     7945           
=======================================
  Hits         5732     5732           
  Misses       2213     2213           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dblock
Copy link
Member

dblock commented Mar 11, 2024

The existing doc says ssl_assert_hostname = False, should it be = None?

@saimedhi
Copy link
Collaborator Author

saimedhi commented Mar 12, 2024

The existing doc says ssl_assert_hostname = False, should it be = None?

In the existing doc, comment says # hostname verification disabled. Therefore ssl_assert_hostname = False is correct.

  • ssl_assert_hostname = False
    no verification is done.
  • ssl_assert_hostname = None
    verification is done with server_hostname (It is equivalent to not setting ssl_assert_hostname)

@dblock
Copy link
Member

dblock commented Mar 12, 2024

Are integration test failures expected?

@saimedhi
Copy link
Collaborator Author

Are integration test failures expected?

Verified that failing tests aren't related to this PR; they're YAML tests. Currently working on fixing them.

dblock
dblock previously approved these changes Mar 12, 2024
Copy link
Member

@dblock dblock left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Update TOC? Maybe the sections can be reworked a bit (top level "SSL", a sub-section like "Establishing a Secure Connection", stuff like that ...).

guides/ssl.md Outdated Show resolved Hide resolved
guides/ssl.md Outdated Show resolved Hide resolved
@saimedhi saimedhi marked this pull request as draft March 15, 2024 23:39
@saimedhi saimedhi marked this pull request as ready for review March 19, 2024 18:18
@saimedhi saimedhi requested a review from dblock March 19, 2024 18:19
@dblock dblock merged commit bd91530 into opensearch-project:main Mar 19, 2024
54 of 57 checks passed
AbitraryYu pushed a commit to AbitraryYu/opensearch-py that referenced this pull request Apr 22, 2024
dblock pushed a commit to dblock/opensearch-py that referenced this pull request Aug 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants