{"action":"created","issue":{"url":"https://api.github.com/repos/10up/ElasticPress/issues/594","repository_url":"https://api.github.com/repos/10up/ElasticPress","labels_url":"https://api.github.com/repos/10up/ElasticPress/issues/594/labels{/name}","comments_url":"https://api.github.com/repos/10up/ElasticPress/issues/594/comments","events_url":"https://api.github.com/repos/10up/ElasticPress/issues/594/events","html_url":"https://github.com/10up/ElasticPress/issues/594","id":181474083,"number":594,"title":"Allow self-signed SSL certificates","user":{"login":"blindpet","id":8589960,"avatar_url":"https://avatars.githubusercontent.com/u/8589960?v=3","gravatar_id":"","url":"https://api.github.com/users/blindpet","html_url":"https://github.com/blindpet","followers_url":"https://api.github.com/users/blindpet/followers","following_url":"https://api.github.com/users/blindpet/following{/other_user}","gists_url":"https://api.github.com/users/blindpet/gists{/gist_id}","starred_url":"https://api.github.com/users/blindpet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blindpet/subscriptions","organizations_url":"https://api.github.com/users/blindpet/orgs","repos_url":"https://api.github.com/users/blindpet/repos","events_url":"https://api.github.com/users/blindpet/events{/privacy}","received_events_url":"https://api.github.com/users/blindpet/received_events","type":"User","site_admin":false},"labels":[{"id":105790604,"url":"https://api.github.com/repos/10up/ElasticPress/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":{"login":"Ritesh-patel","id":2941333,"avatar_url":"https://avatars.githubusercontent.com/u/2941333?v=3","gravatar_id":"","url":"https://api.github.com/users/Ritesh-patel","html_url":"https://github.com/Ritesh-patel","followers_url":"https://api.github.com/users/Ritesh-patel/followers","following_url":"https://api.github.com/users/Ritesh-patel/following{/other_user}","gists_url":"https://api.github.com/users/Ritesh-patel/gists{/gist_id}","starred_url":"https://api.github.com/users/Ritesh-patel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Ritesh-patel/subscriptions","organizations_url":"https://api.github.com/users/Ritesh-patel/orgs","repos_url":"https://api.github.com/users/Ritesh-patel/repos","events_url":"https://api.github.com/users/Ritesh-patel/events{/privacy}","received_events_url":"https://api.github.com/users/Ritesh-patel/received_events","type":"User","site_admin":false},"assignees":[{"login":"Ritesh-patel","id":2941333,"avatar_url":"https://avatars.githubusercontent.com/u/2941333?v=3","gravatar_id":"","url":"https://api.github.com/users/Ritesh-patel","html_url":"https://github.com/Ritesh-patel","followers_url":"https://api.github.com/users/Ritesh-patel/followers","following_url":"https://api.github.com/users/Ritesh-patel/following{/other_user}","gists_url":"https://api.github.com/users/Ritesh-patel/gists{/gist_id}","starred_url":"https://api.github.com/users/Ritesh-patel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Ritesh-patel/subscriptions","organizations_url":"https://api.github.com/users/Ritesh-patel/orgs","repos_url":"https://api.github.com/users/Ritesh-patel/repos","events_url":"https://api.github.com/users/Ritesh-patel/events{/privacy}","received_events_url":"https://api.github.com/users/Ritesh-patel/received_events","type":"User","site_admin":false}],"milestone":null,"comments":4,"created_at":"2016-10-06T17:14:21Z","updated_at":"2016-11-22T19:58:17Z","closed_at":null,"body":"I am preparing a tutorial for ElasticPress behind an nginx reverse proxy with basic http auth and whitelisting. I am able to connect from ElasticPress to Elasticsearch with the basic http auth, however when I add a self-signed certificate and change to https in ElasticPress it no longer connects.\n\nThis is how I am generating the ssl certificate\n\n`sudo openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt`\n\nand the ssl settings in the nginx virtual host\n\n```\n server {\n    listen 9000 ssl;\n       ssl_certificate /etc/nginx/ssl/nginx.crt;\n       ssl_certificate_key /etc/nginx/ssl/nginx.key;\n       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n       ssl_prefer_server_ciphers on;\n       ssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\n       ssl_session_cache shared:SSL:10m;\n\n    auth_basic \"Protected Elasticsearch\";\n    auth_basic_user_file /etc/nginx/.elasticsearch-htpasswd;\n\n    location / {\n        proxy_pass http://127.0.0.1:9200;\n        proxy_redirect off;\n        #restrict IPs\n#        allow ipaddress;\n#        deny all;\n    }\n```\n"},"comment":{"url":"https://api.github.com/repos/10up/ElasticPress/issues/comments/262348673","html_url":"https://github.com/10up/ElasticPress/issues/594#issuecomment-262348673","issue_url":"https://api.github.com/repos/10up/ElasticPress/issues/594","id":262348673,"user":{"login":"wpbullet","id":17055248,"avatar_url":"https://avatars.githubusercontent.com/u/17055248?v=3","gravatar_id":"","url":"https://api.github.com/users/wpbullet","html_url":"https://github.com/wpbullet","followers_url":"https://api.github.com/users/wpbullet/followers","following_url":"https://api.github.com/users/wpbullet/following{/other_user}","gists_url":"https://api.github.com/users/wpbullet/gists{/gist_id}","starred_url":"https://api.github.com/users/wpbullet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wpbullet/subscriptions","organizations_url":"https://api.github.com/users/wpbullet/orgs","repos_url":"https://api.github.com/users/wpbullet/repos","events_url":"https://api.github.com/users/wpbullet/events{/privacy}","received_events_url":"https://api.github.com/users/wpbullet/received_events","type":"User","site_admin":false},"created_at":"2016-11-22T19:58:17Z","updated_at":"2016-11-22T19:58:17Z","body":"Hi @Ritesh-patel I don't really do php development. I do server configurations. Do you have a snippet I can add to test this? It seems having this as an option would be really useful for external encrypted elasticsearch hosts. The setup would usually be whitelisting the host and using https with a self-signed certificate (since domain names aren't really important for elasticsearch hosting), so having sslverify=> false by default would be ideal."}}
{"actor":{"display_login":"wpbullet"}}