Add support for TLS/SSL certificate revocations

[VimCommando]

As it stands today Logstash does not check if a certificate has been revoked. This means if a certificate has been compromised, the entire trust chain may need to be replaced. To simplify the security response, honoring a Certificate Revocation List (CRL) or Online Certificate Status Protocol (OCSP) will be an enormous help.

JRuby's SSL libraries already supports this: https://github.com/jruby/jruby-openssl/pull/124

[crizbe]

+1 I really look for this feature

[cskowronnek]

+1 we would need this too as this is often a requirement in enterprise environments

[cmer86]

+1 we are wondering if there is any progress here?

[cstegm]

+1 we are wondering if there is any progress here? Can someone add the security label here?

[dmuensterer]

+1 this would be a great (almost necessary) feature

[makefu]

+1 it is otherwise very hard to argument about the effective use of Logstash for TLS

[32bitbradley]

+1