{"action":"created","issue":{"url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats/issues/8","repository_url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats","labels_url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats/issues/8/labels{/name}","comments_url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats/issues/8/comments","events_url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats/issues/8/events","html_url":"https://github.com/logstash-plugins/logstash-input-beats/issues/8","id":113702028,"number":8,"title":"Verify client certificates against CA","user":{"login":"andrenarchy","id":1874116,"avatar_url":"https://avatars.githubusercontent.com/u/1874116?v=3","gravatar_id":"","url":"https://api.github.com/users/andrenarchy","html_url":"https://github.com/andrenarchy","followers_url":"https://api.github.com/users/andrenarchy/followers","following_url":"https://api.github.com/users/andrenarchy/following{/other_user}","gists_url":"https://api.github.com/users/andrenarchy/gists{/gist_id}","starred_url":"https://api.github.com/users/andrenarchy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrenarchy/subscriptions","organizations_url":"https://api.github.com/users/andrenarchy/orgs","repos_url":"https://api.github.com/users/andrenarchy/repos","events_url":"https://api.github.com/users/andrenarchy/events{/privacy}","received_events_url":"https://api.github.com/users/andrenarchy/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":{"login":"ph","id":640,"avatar_url":"https://avatars.githubusercontent.com/u/640?v=3","gravatar_id":"","url":"https://api.github.com/users/ph","html_url":"https://github.com/ph","followers_url":"https://api.github.com/users/ph/followers","following_url":"https://api.github.com/users/ph/following{/other_user}","gists_url":"https://api.github.com/users/ph/gists{/gist_id}","starred_url":"https://api.github.com/users/ph/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ph/subscriptions","organizations_url":"https://api.github.com/users/ph/orgs","repos_url":"https://api.github.com/users/ph/repos","events_url":"https://api.github.com/users/ph/events{/privacy}","received_events_url":"https://api.github.com/users/ph/received_events","type":"User","site_admin":false},"milestone":null,"comments":12,"created_at":"2015-10-27T22:19:10Z","updated_at":"2016-02-29T20:10:57Z","closed_at":null,"body":"Currently, the beats input does not verify the client certificate against the CA. This means that *any* client can connect to *any* logstash server and submit arbitrary data. Besides cluttering the logstash server with meaningless data, attackers could try to take servers down by submitting huge amounts of data.\r\n\r\nAnalogous to [filebeat](https://github.com/elastic/filebeat)/[logstash-forwarder](https://github.com/elastic/logstash-forwarder), the client certificate should be checked against the CA on the server side.\r\n\r\nSee also logstash-plugins/logstash-input-lumberjack#31."},"comment":{"url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats/issues/comments/190362829","html_url":"https://github.com/logstash-plugins/logstash-input-beats/issues/8#issuecomment-190362829","issue_url":"https://api.github.com/repos/logstash-plugins/logstash-input-beats/issues/8","id":190362829,"user":{"login":"erikswanson","id":210161,"avatar_url":"https://avatars.githubusercontent.com/u/210161?v=3","gravatar_id":"","url":"https://api.github.com/users/erikswanson","html_url":"https://github.com/erikswanson","followers_url":"https://api.github.com/users/erikswanson/followers","following_url":"https://api.github.com/users/erikswanson/following{/other_user}","gists_url":"https://api.github.com/users/erikswanson/gists{/gist_id}","starred_url":"https://api.github.com/users/erikswanson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erikswanson/subscriptions","organizations_url":"https://api.github.com/users/erikswanson/orgs","repos_url":"https://api.github.com/users/erikswanson/repos","events_url":"https://api.github.com/users/erikswanson/events{/privacy}","received_events_url":"https://api.github.com/users/erikswanson/received_events","type":"User","site_admin":false},"created_at":"2016-02-29T20:10:57Z","updated_at":"2016-02-29T20:10:57Z","body":"When this gets implemented, can we please have access to information about the client certificate? I want to be able to an event to what client certificate was used to send it to Logstash."}}