Can I use these step to generate elastic search root-ca.pem

Elastic Stack Elasticsearch
1

./elasticsearch-certutil ca

./elasticsearch-certutil cert --ca elastic-stack-ca.p12

openssl pkcs12 -in elastic-certificates.p12 -clcerts -nokeys -out certificate.pem

openssl pkcs12 -in elastic-certificates.p12 -nocerts -out key.pem

openssl pkcs12 -in elastic-certificates.p12 -cacerts -nokeys -out root-ca.pem

2

You can, but it's pretty cumbersome.

certutil can write files in PEM format (--pem option) if that's what you want. Or if you're comfortable using openssl, you can just use that for everything. There's no need to use certutil if you don't want to.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.