# Configure HTTPS without xpack and nginx or any other external modules

**URL:** <https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849>\
**Category:** Elasticsearch\
**Created:** [March 5, 2019, 9:07am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849 "2019-03-05T09:07:58Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![MKU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mku/32/48327_2.png) [@MKU](https://discuss.elastic.co/u/MKU)\
**Post date:** [March 5, 2019, 9:07am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/1 "2019-03-05T09:07:58Z")

</div>

I am trying to configure https for elasticsearch without any third party modules or reverse proxies.  
Any idea how to approach it.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [March 5, 2019, 9:21am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/3 "2019-03-05T09:21:48Z")

</div>

I do not think that is possible.

---

<div class="post-metadata">

**Author:** ![MKU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mku/32/48327_2.png) [@MKU](https://discuss.elastic.co/u/MKU)\
**Post date:** [March 5, 2019, 9:26am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/4 "2019-03-05T09:26:07Z")

</div>

Can you justify why it is not possible.  
There has to be some way

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [March 5, 2019, 9:27am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/5 "2019-03-05T09:27:34Z")

</div>

Open source Elasticsearch does not support this, which is why plugins have been developed to add this functionality.

---

<div class="post-metadata">

**Author:** ![MKU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mku/32/48327_2.png) [@MKU](https://discuss.elastic.co/u/MKU)\
**Post date:** [March 5, 2019, 9:40am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/6 "2019-03-05T09:40:29Z")

</div>

is it possible to write a custom plugin for providing https .

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [March 5, 2019, 9:44am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/7 "2019-03-05T09:44:07Z")

</div>

Yes. That has been done. Why would you choose to create and maintain your own rather than using something that already exists though?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 6, 2019, 6:26am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/9 "2019-03-06T06:26:33Z")

</div>

Good luck.

Note that you will need to maintain it anytime you will have to update elastic stack.  
Elasticsearch 6.6 contains that feature out of the box. You can just activate the trial period for 30 days to test it.

---

<div class="post-metadata">

**Author:** ![MKU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mku/32/48327_2.png) [@MKU](https://discuss.elastic.co/u/MKU)\
**Post date:** [March 13, 2019, 6:00am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/12 "2019-03-13T06:00:49Z")

</div>

[https://qbox.io/blog/elasticsearch-netty-secure-ssl-tls-implementation](https://qbox.io/blog/elasticsearch-netty-secure-ssl-tls-implementation)  
I went through above blog to connfigure ssl,but most of netty functions used here are not supported now.  
Can somebody provide the updated steps of that blog.

---

<div class="post-metadata">

**Author:** ![MKU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mku/32/48327_2.png) [@MKU](https://discuss.elastic.co/u/MKU)\
**Post date:** [March 18, 2019, 6:43am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/13 "2019-03-18T06:43:59Z")

</div>

Hi @Christian_Dahlqvist,  
I configured ssl for elasticsearch without any plugins by modifying netty4servertransport module.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [March 18, 2019, 6:51am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/14 "2019-03-18T06:51:03Z")

</div>

Did you create this as a plugin or are you now running a custom build?

---

<div class="post-metadata">

**Author:** ![MKU](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mku/32/48327_2.png) [@MKU](https://discuss.elastic.co/u/MKU)\
**Post date:** [March 18, 2019, 6:52am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/15 "2019-03-18T06:52:19Z")

</div>

No i did not create any plugins,i just modified initchannel of httpchannelhandler.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 15, 2019, 6:52am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849/16 "2019-04-15T06:52:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
