Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add docs about 'redirectHttpFromPort' setting #12708

Merged
merged 2 commits into from
Jul 16, 2017

Conversation

kimjoar
Copy link
Contributor

@kimjoar kimjoar commented Jul 7, 2017

The missing docs for #10930.

Is this clear enough? Any suggestions to better text?

@kimjoar kimjoar added the review label Jul 7, 2017
@kimjoar
Copy link
Contributor Author

kimjoar commented Jul 10, 2017

cc @epixa

@@ -58,6 +58,7 @@ startup. Your Kibana users still need to authenticate with Elasticsearch, which
`server.ssl.certificateAuthorities`:: List of paths to PEM encoded certificate files that should be trusted.
`server.ssl.supportedProtocols`:: *Default: TLSv1, TLSv1.1, TLSv1.2* Supported protocols with versions. Valid protocols: `TLSv1`, `TLSv1.1`, `TLSv1.2`
`server.ssl.cipherSuites`:: *Default: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-GCM-SHA384, DHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES128-SHA256, DHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, DHE-RSA-AES256-SHA384, ECDHE-RSA-AES256-SHA256, DHE-RSA-AES256-SHA256, HIGH,!aNULL, !eNULL, !EXPORT, !DES, !RC4, !MD5, !PSK, !SRP, !CAMELLIA*. Details on the format, and the valid options, are available via the [OpenSSL cipher list format documentation](https://www.openssl.org/docs/man1.0.2/apps/ciphers.html#CIPHER-LIST-FORMAT)
`server.ssl.redirectHttpFromPort` :: Kibana will start an http server on this port and redirect all requests to the https port. This cannot be the same port as the https port.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you clarify "https port"? Perhaps just "Kibana will bind to this port and redirect all http requests to https over the port configured as server.port"

Can you also move this up in the list to below keyPassphrase rather than burying it under things most people don't configure, like cas, protocols, and ciphers.

@kimjoar
Copy link
Contributor Author

kimjoar commented Jul 11, 2017

Updated

@epixa
Copy link
Contributor

epixa commented Jul 11, 2017

jenkins, test this

@kimjoar kimjoar force-pushed the docs/redirect-http-from-port branch from 948c0a2 to 38bc795 Compare July 14, 2017 21:01
@kimjoar kimjoar merged commit 2af99de into elastic:master Jul 16, 2017
@kimjoar kimjoar deleted the docs/redirect-http-from-port branch July 16, 2017 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants