# Adding xpack.security.http.ssl.truststore.secure\_password in the keystore

**URL:** <https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [November 12, 2020, 9:44am UTC](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183 "2020-11-12T09:44:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![anon17386273](https://avatars.discourse-cdn.com/v4/letter/a/d2c977/32.png) [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Post date:** [November 12, 2020, 9:44am UTC](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183/1 "2020-11-12T09:44:34Z")

</div>

Hi

Wanted to know if `elasticsearch-keystore add` is the only way to add `xpack.security.http.ssl.truststore.secure_password` into the keystore?

Currently my keystore is generated using openssl and not generated using `elasticsearch-keystore create`

Any help is appreciated

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [November 12, 2020, 9:52am UTC](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183/2 "2020-11-12T09:52:11Z")

</div>

Hi,

`elasticsearch-keystore add` is the only way to deal with the elasticsearch keystore.

> [@anon17386273](#):
>
> Currently my keystore is generated using openssl

I think you are confusing the elasticsearch keystore which is the keystore elasticsearch uses for its [secure settings](https://www.elastic.co/guide/en/elasticsearch/reference/current/secure-settings.html). You can't create this with other tools.

I think you mean the keystores that you use for TLS i.e. `xpack.security.http.ssl.truststore` and `xpack.security.http.ssl.keystore`

---

<div class="post-metadata">

**Author:** ![anon17386273](https://avatars.discourse-cdn.com/v4/letter/a/d2c977/32.png) [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Post date:** [November 12, 2020, 10:19am UTC](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183/3 "2020-11-12T10:19:45Z")

</div>

How does elasticsearch know where to find the keystore that stores the secure\_passwords?  
How do i specify the path for this?

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [November 12, 2020, 10:24am UTC](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183/4 "2020-11-12T10:24:05Z")

</div>

The keystore is picked up from `$ES_PATH_CONF` which defaults to `$ES_HOME/config`. To be clear, you _cannot_ just point that to an external ( `JKS`, `P12`, etc. ) keystore of your own. This is an internal implementation of elasticsearch.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 10, 2020, 10:24am UTC](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183/5 "2020-12-10T10:24:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.