afmarulanda/wazuh-ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #1863 from wazuh/mtc/1849-Outdated_Indexer_ports_configuration

Browse Source 
Add missing parameters SSL ciphers and protocols to opensearch.yml
This commit is contained in:
Gonzalo Acuña 2025-12-01 14:29:45 -03:00 committed by GitHub
commit 8717802894
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
### Added ### Added
- None - Add missing parameters SSL ciphers and protocols to opensearch.yml ([#1863](https://github.com/wazuh/wazuh-ansible/pull/1863))
### Changed ### Changed

7
roles/wazuh/wazuh-indexer/templates/opensearch.yml.j2
View File

@ -37,6 +37,13 @@ plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/
plugins.security.ssl.http.enabled: true plugins.security.ssl.http.enabled: true
plugins.security.ssl.transport.enforce_hostname_verification: false plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.transport.resolve_hostname: false plugins.security.ssl.transport.resolve_hostname: false
plugins.security.ssl.http.enabled_ciphers:
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
- "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
plugins.security.ssl.http.enabled_protocols:
- "TLSv1.2"
plugins.security.authcz.admin_dn: plugins.security.authcz.admin_dn:
- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US" - "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"