Re-enable hostname verification in opensearch #16219 (#16810)

Graylog2 · Oct 5, 2023 · 087eb93 · 087eb93
1 parent 880fa3b
commit 087eb93
Showing 1 changed file with 0 additions and 5 deletions.
diff --git a/...ain/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java b/...ain/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java
@@ -111,11 +111,6 @@ public Map<String, String> getProperties() throws GeneralSecurityException, IOEx
             config.put("plugins.security.ssl.transport.truststore_filepath", TRUSTSTORE_FILENAME);
             config.put("plugins.security.ssl.transport.truststore_password", truststore.passwordAsString());
 
-            // this disables hostname verification for transport. It's a workaround for localnode communication
-            // via SSL, where Opensearch still tries to communicate with 'localhost' and not the publish_host or other
-            // configured node names.
-            config.put("plugins.security.ssl.transport.enforce_hostname_verification", "false");
-
             config.put("plugins.security.ssl.http.enabled", "true");
 
             config.put("plugins.security.ssl.http.keystore_type", KEYSTORE_FORMAT);