Certificate pinning in Elasticsearch

Elastic Stack Elasticsearch
1

Hi,

We are using Elasticsearch 7.17.0 and using azure storage blobs for snapshots. We recently received a general notification from azure about certificate pinning.

I believe we do not have any such configuration that enables cert pinning on our end but wanted to clarify. Are there such option or feature in Elasticsearch that enables certificate pinning?

2

Elasticsearch itself has no feature related to certificate pinning, but the JDK specifies the root CA certificates that it trusts and you need to keep that list up to date. The simplest way to do that is to keep ES up to date - 7.17.0 is 2 years old now, an upgrade to the latest version would be wise.