Skip to content

Commit

Permalink
Describe how to enable TLS/SSL connection properly
Browse files Browse the repository at this point in the history
Originally reported by LukasJerabek in fluentd#3584.

It turns out that this configuration example is confusing, because,
while it explicitly enables the hostname verification, it still uses
an IP address for connection. Fix it.

Signed-off-by: Fujimoto Seiji <[email protected]>
  • Loading branch information
fujimotos committed Jan 12, 2022
1 parent abee4bc commit 3343240
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions output/forward.md
Original file line number Diff line number Diff line change
Expand Up @@ -473,7 +473,7 @@ If you have set up [TLS/SSL encryption](../input/forward.md#how-to-enable-tls/ss
@type forward
transport tls
<server>
host 192.168.1.2
host example.com
port 24224
</server>
</match>
Expand All @@ -486,9 +486,10 @@ If you are using a self-singed certificate, copy the certificate file to the for
@type forward
transport tls
tls_cert_path /path/to/fluentd.crt # Set the path to the certificate file.
tls_verify_hostname true # Set false to ignore cert hostname.
<server>
host 192.168.1.2
# Set the remote server name. This name should match the Common Name
# field in the certificate.
host example.com
port 24224
</server>
</match>
Expand Down

0 comments on commit 3343240

Please sign in to comment.