lib/logstash/inputs/elasticsearch.rb in logstash-input-elasticsearch-4.17.1 vs lib/logstash/inputs/elasticsearch.rb in logstash-input-elasticsearch-4.17.2

@@ -519,10 +519,12 @@
         when 'none'
           logger.warn "You have enabled encryption but DISABLED certificate verification, " +
                         "to make sure your data is secure set `ssl_verification_mode => full`"
           ssl_options[:verify] = :disable
         else
-          ssl_options[:verify] = :strict
+          # Manticore's :default maps to Apache HTTP Client's DefaultHostnameVerifier,
+          # which is the modern STRICT verifier that replaces the deprecated StrictHostnameVerifier
+          ssl_options[:verify] = :default
       end
     end
 
     ssl_options[:cipher_suites] = params["ssl_cipher_suites"] if params.include?("ssl_cipher_suites")