# Configure SSL for each Elastic node

**URL:** <https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057>\
**Category:** Logstash\
**Created:** [March 21, 2018, 7:07pm UTC](https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057 "2018-03-21T19:07:07Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![elasticprof](https://avatars.discourse-cdn.com/v4/letter/e/7ab992/32.png) [@elasticprof](https://discuss.elastic.co/u/elasticprof)\
**Post date:** [March 21, 2018, 7:07pm UTC](https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057/1 "2018-03-21T19:07:08Z")

</div>

Hi,

I have 5 nodes and each node is having different ssl certificate, in such case how do configure ssl for each one of them

```
input {
	stdin {}
    beats {
        port => 5044
    }
}

#filter {
#
#}

output {
    elasticsearch{
        hosts => ["https://192.16.202.154:9200,https://192.16.202.153:9200,https://192.16.202.152:9200,,https://192.16.202.151:9200,https://192.16.202.150:9200"]
        user => "elastic"
        password => "changeme"
        index => "-%{[@metadata][beat]}-%{+YYYY.MM.dd}"
        ssl_certificate_verification => false
    }
	stdout { codec => rubydebug }
}
```

---

<div class="post-metadata">

**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\
**Post date:** [March 22, 2018, 7:22am UTC](https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057/2 "2018-03-22T07:22:30Z")

</div>

Are the certificates signed by the same Certificate Authority ("CA")? If so, you can set the path to the CA cert per the usual documentation. If not, multiple pem can simply be concatenated together to form a "bundle" pem.

---

<div class="post-metadata">

**Author:** ![elasticprof](https://avatars.discourse-cdn.com/v4/letter/e/7ab992/32.png) [@elasticprof](https://discuss.elastic.co/u/elasticprof)\
**Post date:** [March 22, 2018, 8:02pm UTC](https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057/3 "2018-03-22T20:02:55Z")

</div>

yes @yaauie they are signed by same CA,

Curious can you please give an example if they are from different CA's

---

<div class="post-metadata">

**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\
**Post date:** [March 23, 2018, 10:22am UTC](https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057/4 "2018-03-23T10:22:43Z")

</div>

To create a pem that holds multiple certificates, you can simply concatenate the pem files that hold individual certificates together (this is not unique to Logstash -- it's part of the PEM format):

```auto
cat a.pem b.pem c.pem > combined-abc.pem

```

---

<div class="post-metadata">

**Author:** ![elasticprof](https://avatars.discourse-cdn.com/v4/letter/e/7ab992/32.png) [@elasticprof](https://discuss.elastic.co/u/elasticprof)\
**Post date:** [March 23, 2018, 1:30pm UTC](https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057/5 "2018-03-23T13:30:06Z")

</div>

Ok i was thinking the concatenation happens in logstash config file, got you.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 20, 2018, 1:30pm UTC](https://discuss.elastic.co/t/configure-ssl-for-each-elastic-node/125057/6 "2018-04-20T13:30:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.