Certificate format for Kibana

Elastic Stack Kibana
2

Update

After spending some time testing back and forward I was able to get it to work

  1. Kibana does support PKCS#12 format
  2. Make sure you have the following lines within your kibana.yml file
server.ssl.enabled: true
server.ssl.keystore.path: "/etc/kibana/certs/elastic-certificates.p12"
elasticsearch.ssl.certificateAuthorities: [ "/etc/kibana/certs/elastic-stack-ca.p12" ]
elasticsearch.ssl.verificationMode: certificate
  1. If your certificate is not password protected, make sure to also add an empty string "" to the kibana-keystore. When prompt for a password, just leave in blank.

$ sudo /usr/share/kibana/bin/kibana-keystore add server.ssl.keystore.password --allow-root

  1. Restart kibana service
  2. You can now point your browser to https://[kibana_address]:5601

The above steps worked for me and I hope this help other users as well
Cheers!