[FIX] [BC] ssl_verification parameter for a connection is now only accepting a bool value. New parameters are added: ssl_ca, ssl_key, ssl_cert.

Author: pmishev

src/DependencyInjection/Configuration.php

@@ -95,7 +95,19 @@ private function getConnectionsNode(): NodeDefinition
                     ->end()
                     ->scalarNode('ssl_verification')
                         ->defaultNull()
-                        ->info('Set to true to enable SSL certificate verification and use the default CA bundle provided by operating system or provide the path to a CA bundle to enable verification using a custom certificate')
+                        ->info('Set to true to enable SSL certificate verification')
+                    ->end()
+                    ->scalarNode('ssl_ca')
+                        ->defaultNull()
+                        ->info('The Certificate Authority (CA) bundle to use')
+                    ->end()
+                    ->scalarNode('ssl_key')
+                        ->defaultNull()
+                        ->info('SSL key to use')
+                    ->end()
+                    ->scalarNode('ssl_cert')
+                        ->defaultNull()
+                        ->info('SSL certificate to use')
                     ->end()
                     ->scalarNode('profiling')
                         ->defaultTrue()

src/Manager/ConnectionManager.php

@@ -84,9 +84,21 @@ public function getClient(): Client
         if (!$this->client) {
             $clientBuilder = ClientBuilder::create();
             $clientBuilder->setHosts($this->connectionSettings['hosts']);
+
+            // Configure SSL/TLS settings
             if (isset($this->connectionSettings['ssl_verification'])) {
                 $clientBuilder->setSSLVerification($this->connectionSettings['ssl_verification']);
             }
+            if (isset($this->connectionSettings['ssl_ca'])) {
+                $clientBuilder->setCABundle($this->connectionSettings['ssl_ca']);
+            }
+            if (isset($this->connectionSettings['ssl_key'])) {
+                $clientBuilder->setSSLKey($this->connectionSettings['ssl_key']);
+            }
+            if (isset($this->connectionSettings['ssl_cert'])) {
+                $clientBuilder->setSSLCert($this->connectionSettings['ssl_cert']);
+            }
+
             if ($this->logger) {
                 $clientBuilder->setLogger($this->logger);
             }

tests/Unit/DependencyInjection/ElasticsearchExtensionTest.php

@@ -109,6 +109,9 @@ public function getData()
                 'logging'             => false,
                 'bulk_batch_size'     => 123,
                 'ssl_verification'    => null,
+                'ssl_ca'              => null,
+                'ssl_key'             => null,
+                'ssl_cert'            => null,
             ],
         ];