Wildcard for dns and ip in tlsconfig.yml

Search Guard
1

Elasticsearch Version: 5.6.15

Search Guard Version: 5.6.15-19.3

I was wondering if it was possible to use wildcards as part of the DNS/IP list in tlsconfig.yml

ex

nodes:
  - name: somenode
    dn: CN=somenode.onprem.com,OU=Ops,O=ES Ops,DC=somenode-onprem,DC=com
    dns:
    - blah-api
    - *-elasticsearch
    - es-*
    ip:
    - 100.107.65.*
3

No, as per spec wildcards in IP addresses are not allowed:

When the subjectAltName extension contains an iPAddress, the address MUST be stored in the octet string in “network byte order”, as specified in [RFC791]. The least significant bit (LSB) of each octet is the LSB of the corresponding byte in the network address. For IP version 4, as specified in [RFC791], the octet string MUST contain exactly four octets. For IP version 6, as specified in [RFC2460], the octet string MUST contain exactly sixteen octets.

( RFC 5280 )

4

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.