Support for TLS v1.3

[kajetan-nobel]

Description

Adds support to TLS v1.3

Issues Resolved

closes #838

Testing the changes

1. Create a certificate that fulfills the requirements
2. Fill needed configuration in config/opensearch_dashboards.yml

opensearch.ssl.verificationMode: full
server.ssl.enabled: true
server.ssl.certificate: <path/to/client.pem>
server.ssl.key: <path/to/client-key.pem>
server.ssl.certificateAuthorities: <path/to/root-ca.pem>
opensearch.ssl.certificateAuthorities: <path/to/root-ca.pem>

3. Run dashboards

Check List

• All tests pass
  • yarn test:jest
  • yarn test:jest_integration
  • yarn test:ftr
• New functionality includes testing.
• New functionality has been documented.
• Update CHANGELOG.md
• Commits are signed per the DCO using --signoff

[codecov]

Codecov Report

Merging #5133 (a0bc908) into main (b3104ce) will increase coverage by 0.03%.
Report is 1 commits behind head on main.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #5133      +/-   ##
==========================================
+ Coverage   66.74%   66.77%   +0.03%     
==========================================
  Files        3284     3284              
  Lines       63095    63095              
  Branches    10049    10049              
==========================================
+ Hits        42110    42130      +20     
- Misses      18488    18496       +8     
+ Partials     2497     2469      -28     

Flag	Coverage Δ
Linux_1	35.26% <ø> (ø)
Linux_2	55.24% <ø> (?)
Linux_3	43.84% <ø> (-0.01%)	⬇️
Linux_4	35.36% <ø> (ø)
Windows_1	35.27% <ø> (ø)
Windows_2	55.20% <ø> (ø)
Windows_3	?
Windows_4	35.36% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files	Coverage Δ
...er/core_usage_data/core_usage_data_service.mock.ts	71.42% <ø> (ø)
src/core/server/http/ssl_config.ts	92.15% <ø> (ø)

... and 14 files with indirect coverage changes

[kajetan-nobel]

Can any other maintainers of this repository review this PR for me please? Thank you.

[davidlago]

@seanneumann could you please help us get this one reviewed? thanks!

[kajetan-nobel]

A recent main has been merged, a review will be really appreciated 😅 . Thanks!

[AMoo-Miki]

Prior to the change:

 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      not offered
 TLS 1.1    not offered
 TLS 1.2    offered (OK)
 TLS 1.3    offered (OK): final
 NPN/SPDY   not offered
 ALPN/HTTP2 http/1.1 (offered)

With this PR and after including server.ssl.supportedProtocols: ["TLSv1.3"]

 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      not offered
 TLS 1.1    not offered
 TLS 1.2    not offered
 TLS 1.3    offered (OK): final
 NPN/SPDY   not offered
 ALPN/HTTP2 not offered