TLS connections by IP address to servers with self-signed certificates

[jasonish]

Due to an issue in dependency libraries, EveBox cannot connect to an Elasticsearch server using TLS by IP address. It must use a hostname. While untested, this probably applied to the EveBox Agent connecting to an EveBox server as well.

References:

• invalid dnsname rustls/hyper-rustls#84
• Can't connect to a server presenting a certificate with an IP address in its common name rustls/rustls#184

One solution is to use OpenSSL instead of Rustls, but that will make building the static binaries more difficule.

[jasonish]

Does not appear to be an issue anymore.