liveBook · Manning

Certification authority

As explained in Logs and Telemetry

A certificate authority is a trusted entity that issues and validates digital certificates and maintains their revocation records.

A certification authority (CA) is a trusted entity that issues and validates digital certificates and maintains revocation records. In observability pipelines, CA-backed SSL/TLS helps protect metrics, logs, and traces as they cross distributed networks. section 3.6.3

Trusting an HTTPS input

A Fluent Bit HTTP input enables TLS with `tls on` and points to a CA directory through `tls.ca_path`. The configuration also supplies a private-key path; `tls.verify off` is shown as an explicit verification choice with operational security consequences. section 3.6.3

Listing 3.8 HTTP input example: https.conf
[SERVICE]
  flush 1
  log_level debug

[INPUT]
  name http         #1
  listen 0.0.0.0. 
  port 9882                 #2
  successful_response_code 200      
  success_header x-fluent-svc fluent-bit
  tag http      
  tls on                            #3
  tls.ca_path /etc/pki/tls/certs/           #4
  #ts.ca_file /etc/pki/tls/certs/fb-book      #5
  tls.key_file /etc/pki/tls/certs/fb-book.key
  tls.verify off     #6

[OUTPUT]
  name stdout
  match *

Inspect the complete HTTPS input configuration, including the CA path, optional CA file, key file, verification setting, and stdout output. section 3.6.3

How Logs and Telemetry covers it

How deep it goes
Configures CA paths and TLS verification in an HTTP input, but stops short of explaining certificate issuance or revocation workflows.
Examples
Uses a Fluent Bit HTTPS input with CA directory, optional CA file, private key, and verification settings.
What it assumes
Assumes HTTP input configuration and access to configured CA, certificate, and private-key paths.
What you can do after
Operate/configure a Fluent Bit HTTP input with a CA path and explicit TLS verification settings.
How it connects
Connects certification authorities with SSL/TLS, HTTP inputs, observability data, and zero trust.
Cover of Logs and Telemetry
liveBookmanning.com
Read Logs and Telemetry on liveBook Get the book at manning.com

Also explained in

Compare how 8 books explain certification authority →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Logs and Telemetry. The section links point to the parts of the book it draws on.