From 02e856a9bff53961e96729dd6e8efd88b353b6e8 Mon Sep 17 00:00:00 2001 From: Anael Mobilia Date: Wed, 3 May 2023 21:39:46 +0200 Subject: [PATCH] From Elasticsearch 8.7, xpack security isn't on by default but is required (#395) ``` org.elasticsearch.ElasticsearchSecurityException: invalid configuration for xpack.security.transport.ssl - [xpack.security.transport.ssl.enabled] is not set, but the following settings have been configured in elasticsearch.yml : [xpack.security.transport.ssl.keystore.secure_password,xpack.security.transport.ssl.truststore.secure_password] ``` --- docs/source/index.md | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/docs/source/index.md b/docs/source/index.md index 33ac95fa..0b82ff5d 100644 --- a/docs/source/index.md +++ b/docs/source/index.md @@ -1044,6 +1044,33 @@ sudo service elasticsearch start sudo service kibana start ``` +As of Elasticsearch 8.7, activate secure mode (xpack.security.*.ssl) +```bash +sudo vim /etc/elasticsearch/elasticsearch.yml +``` +Add the following configuration +``` +# Enable security features +xpack.security.enabled: true + +xpack.security.enrollment.enabled: true + +# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents +xpack.security.http.ssl: + enabled: true + keystore.path: certs/http.p12 + +# Enable encryption and mutual authentication between cluster nodes +xpack.security.transport.ssl: + enabled: true + verification_mode: certificate + keystore.path: certs/transport.p12 + truststore.path: certs/transport.p12 +``` +```bash +sudo systemctl restart elasticsearch +``` + To create a self-signed certificate, run: ```bash