How to modify the accepted ciphers in http transport tls block

When trying to set transport tls ciphers within http source, it has no affect on what ciphers are accepted or atleast advertised by the server. I can change the TLS version and see that it is properly reflected in the advertisement using SSL Server Test (Powered by Qualys SSL Labs), but the same test results do not change in regards to the cipher values set.

Any help would be greatly appreciated.

Which version of fluentd or td-agent and OpenSSL are you using?

AFAIK td-agent 3.8.0, or using fluentd till v1.11.1 with OpenSSL 1.0.2 have a bug that they can’t set ciphers: Set TLS ciphers list correcty on older OpenSSL by ashie · Pull Request #3093 · fluent/fluentd · GitHub

1 Like