Elasticsearch Version: 5.6.15
Search Guard Version: 5.6.15-19.3
I was wondering if it was possible to use wildcards as part of the DNS/IP list in tlsconfig.yml
- name: somenode
dn: CN=somenode.onprem.com,OU=Ops,O=ES Ops,DC=somenode-onprem,DC=com
No, as per spec wildcards in IP addresses are not allowed:
When the subjectAltName extension contains an iPAddress, the address MUST be stored in the octet string in “network byte order”, as specified in [RFC791]. The least significant bit (LSB) of each octet is the LSB of the corresponding byte in the network address. For IP version 4, as specified in [RFC791], the octet string MUST contain exactly four octets. For IP version 6, as specified in [RFC2460], the octet string MUST contain exactly sixteen octets.
( RFC 5280 )
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.