Nested properties overwrite non-nested properties

[c-a-m]

We have one shield settings that is both part of the hierarchy of setting names, and also a leaf-node setting:
shield.transport.ssl is a boolean that turns ssl on and off
shield.transport.ssl.client.auth is a boolean that turns on/off client-certificate authentication

if shield.transport.ssl is set before shield.transport.ssl.client.auth it gives this error:

esvm (1.0) $ esvm

/usr/local/lib/node_modules/esvm/lib/explodeBy.js:9
        memo[_key] = value;
                   ^
TypeError: Cannot set property 'auth' of undefined
    at walk (/usr/local/lib/node_modules/esvm/lib/explodeBy.js:9:20)
    at walk (/usr/local/lib/node_modules/esvm/lib/explodeBy.js:12:9)
    at walk (/usr/local/lib/node_modules/esvm/lib/explodeBy.js:12:9)
    at walk (/usr/local/lib/node_modules/esvm/lib/explodeBy.js:12:9)
    at walk (/usr/local/lib/node_modules/esvm/lib/explodeBy.js:12:9)
    at walk (/usr/local/lib/node_modules/esvm/lib/explodeBy.js:12:9)
    at /usr/local/lib/node_modules/esvm/lib/explodeBy.js:14:7
    at forOwn (/usr/local/lib/node_modules/esvm/node_modules/lodash/dist/lodash.js:2105:15)
    at Function.forEach (/usr/local/lib/node_modules/esvm/node_modules/lodash/dist/lodash.js:3302:9)
    at module.exports (/usr/local/lib/node_modules/esvm/lib/explodeBy.js:4:5)

If shield.transport.ssl.client.auth comes first, it gets overridden by shield.transport.ssl

[simianhacker]

How does this work in the JSON version of the config? Is the expectation that you can set both shield.transport.ssl and shield.transport.ssl.client.auth at the same time?

For a flat key structure that is just using the keys as namespace this works. But if it's a JSON structure where the keys translate to objects then shield.transport.ssl and shield.transport.ssl.client.auth it won't work because of the collision at the shield.transport.ssl.client level.

[c-a-m]

I was afraid of that. My config looks like this:

"shield": {
        "enabled": true,
        "system_key.file": ".esvm-shield-config/system_key",
        "audit.enabled": true,
        "transport": {
          "ssl": true,
          "ssl.client.auth": false
        },
        "http.ssl": true,
        "ssl.hostname_verification": true,
        "ssl.keystore": {
          "path": "../../src/test/resources/org/elasticsearch/shield/transport/ssl/certs/simple/testnode.jks",
          "password": "testnode"
        },
        "authc.realms" : {
          "esusers": {
            "type" : "esusers",
            "order" : 0,
            "files" : {
              "users" : ".esvm-shield-config/users",
              "users_roles" : ".esvm-shield-config/users_roles"
            }
          }
        },
        "authz.store.files.roles" : ".esvm-shield-config/roles.yml"
      }