Hello once more! I've been experimenting some scenarions with AWS Authentication a

By testing a little more, this is what i've found: The full er

AWS Signature failure - Incorrect HOST header? about log4stash HOT 1 OPEN

Gprsk commented on June 25, 2024

AWS Signature failure - Incorrect HOST header?

from log4stash.

Comments (1)

Gprsk commented on June 25, 2024

By testing a little more, this is what i've found:

The full error is this one. Seems not like a HOST header, but a certificate problem. Not so sure how to solve it:

log4net:ERROR Got error while reading response from ElasticSearch
System.InvalidOperationException: Some error occurred while sending request to ElasticSearch.
System.Net.WebException: The SSL connection could not be established, see inner exception.
 ---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure: RemoteCertificateNameMismatch

If I enable AllowSelfSignedServerCert, this is the error:

log4net:ERROR Got error while reading response from ElasticSearch
System.InvalidOperationException: Some error occurred while sending request to ElasticSearch.
System.Net.WebException: The SSL connection could not be established, see inner exception.
 ---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
 ---> System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.

Im trying to find out if this is something "solvable" or something is wrong with our certificates.

At the same time, could I suggest you guys to add another option to the XML Configuration?
Something along the lines of EnableInsecureSSL, so even on insecure connections (my case currently? seems like it) it would work.

This implementation can be made on file WebElasticClient - and if this option is active, just passing a return true; callback to ServicePointManager.ServerCertificateValidationCallback event should suffice.

from log4stash.

Recommend Projects