Skip to content

Elasticsearch - Skip certificate validation #327

@11qu1d

Description

@11qu1d

Hi,

Not sure if this is the right place to raise this issue, please point me to the right place if mistaken.

We are facing an issue with connecting to Elasticsearch. Our ES cluster is currently using self-signed certificates to secure the connection via HTTPS. This causes issue when seafevents tries to connect with below error:

06/16/2024 23:05:41 [ERROR] seafes:158 start_index_local: Index process init error: TLS error caused by: TlsError(TLS error caused by: SSLError([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1007))).

I have tried using the below in seafevents.conf but still getting the same error:

[INDEX FILES]
.
.
.
verify_certs = false
cafile = /shared/seafile/conf/es_cacert.pem

I am not sure if these are even used in the code. It should be a relatively easy fix to allow disabling cert verification and expose it as a config parameter.

Version details below:
Seafile version: 11.0.7 Pro (Docker - HA cluster)

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions