Implement Transport Security

[dbrgn]

Are wss connections (secured by TCP) supported?

http://blog.kaazing.com/2012/02/28/html5-websocket-security-is-strong/

Or is there some other way to secure the transmission of the logs?

[tagkiller]

+1

[pvdvreede]

Does the ftw gem already support wss/https? Is that the question?

The ftw readme seems to indicate that it does: https://github.com/jordansissel/ruby-ftw#websockets. See the comment in the code snippet:

# 'http(s)' or 'ws(s)' urls are valid here. They will mean the same thing.
websocket = agent.websocket!("http://somehost/endpoint")

[pvdvreede]

OH sorry, should mention that it seems that the websocket part of this logstash plugin uses the ftw ruby gem to connect and communicate with a websocket server. So if that supports TLS then I would think it should be built in for this plugin. However, I have not tried it...

[timhurkmans]

Could you guys verify that it works? For me, ws works, but wss fails with an error. I'm no ruby developer, so I don't know how to debug this.

Works (configuration):

url => "ws://127.0.0.1:8234/?param=logstash"

Restart server @ 127.0.0.1/8234 in secure mode.

Fails to connect (configuration):

url => "wss://127.0.0.1:8234/?param=logstash"

Logs:

websocket input client threw exception, restarting {:exception=>#<NoMethodError: undefined method `redirect?' for nil:NilClass>, :level=>:warn}

Edit: Added the fact that the server is restarted in secure mode. Other wss clients can connect with a wss url in this mode.

[fedemonte89]

Hi! Any update about this issue? I'm trying to use the input plugin with "wss" protocol configured with a certificate generated by http://www.selfsignedcertificate.com/ and converted in pfx with https://www.sslshopper.com/ssl-converter.html.

My server is done with Fleck (C#) and it works with simple javascript client running on the same machine of logstash.

Thank you very much for your project!!!

[mruggio]

Hi,
how did you configure SSL? I did't find this configuration in websocket-input-plugin.

Thanks

[fran-pastor]

Could you guys verify that it works? For me, ws works, but wss fails with an error. I'm no ruby developer, so I don't know how to debug this.

Works (configuration):

url => "ws://127.0.0.1:8234/?param=logstash"

Restart server @ 127.0.0.1/8234 in secure mode.

Fails to connect (configuration):

url => "wss://127.0.0.1:8234/?param=logstash"

Logs:

websocket input client threw exception, restarting {:exception=>#<NoMethodError: undefined method `redirect?' for nil:NilClass>, :level=>:warn}

Edit: Added the fact that the server is restarted in secure mode. Other wss clients can connect with a wss url in this mode.

Hi @timhurkmans , I have the same problem as you, have you found the solution?
I'm trying to read from a secure websocket with token and there's no way
With wsdump and other python scripts I have no problems but with logstash input plugin there is no way
:(

[mruggio]

I have this errors:

Why it's untrusted: (20) unable to get local issuer certificate
Why it's untrusted: (27) certificate not trusted

I think they are related to ruby-ftw

[jbpratt]

Hi, is there any update on this issue or a temporary solution? I am currently receiving: [WARN ][logstash.inputs.websocket] websocket input client threw exception, restarting {:exception=>#<OpenSSL::SSL::SSLError: Received fatal alert: handshake_failure>} for my config:

input {
  websocket {
    mode => "client"
    url => "wss://localhost/ws"
  }
}

[magnusbaeck]

I suspect the handshake_failure problem is the one described in jordansissel/ruby-ftw#31, for which there appears to be no simple way forward.