# Configuring a Cluster with public certificates

**URL:** <https://discuss.elastic.co/t/configuring-a-cluster-with-public-certificates/342430>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [September 6, 2023, 10:38am UTC](https://discuss.elastic.co/t/configuring-a-cluster-with-public-certificates/342430 "2023-09-06T10:38:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![RuthGl](https://avatars.discourse-cdn.com/v4/letter/r/4af34b/32.png) [@RuthGl](https://discuss.elastic.co/u/RuthGl)\
**Post date:** [September 6, 2023, 10:38am UTC](https://discuss.elastic.co/t/configuring-a-cluster-with-public-certificates/342430/1 "2023-09-06T10:38:27Z")

</div>

Hello!

How to set up a cluster with public certificates? I have certificates from AlphaSSL with wildcard \*.mydomain.com :  
root\_ca.crt  
intermediate.crt  
mydomain.key  
mydomain.crt

How can I properly configure transport and http layers?  
This is the configuration now, but it only works with elasticsearch.ssl.verificationMode: none.  
f you put "full" or "certificate", then Kibana gives the error "Kibana is not ready yet".

Config in Elasticsearch nodes:

```auto
node.name: es-1.mydomain.com
network.host: es-1.mydomain.com
discovery.seed_hosts: ["es-1.mydomain.com", "es-2.mydomain.com", "es-3.mydomain.com"]
xpack.security.http.ssl:
  enabled: true
  certificate: certs/mydomain.crt
  key: certs/mydomain.key
  certificate_authorities: certs/intermediate.crt
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  certificate: certs/mydomain.crt
  key: certs/mydomain.key
  certificate_authorities: certs/intermediate.crt

```

Config in Kibana node:

```auto
server.host: "kibana.mydomain.com"
server.publicBaseUrl: "https://kibana.mydomain.com:5601"
server.name: "kibana.mydomain.com"
server.ssl.certificate: /etc/kibana/certs/kibana.crt #mydomain.crt+intermediate.crt+root_ca.crt
server.ssl.key: /etc/kibana/certs/mydomain.key
elasticsearch.hosts: ["https://es-1.mydomain.com:9200", "https://es-3.mydomain.com:9200", "https://es-3.mydomain.com:9200"]
elasticsearch.ssl.certificateAuthorities: ["/etc/kibana/certs/intermediate.crt"]
elasticsearch.ssl.verificationMode: none

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 4, 2023, 10:39am UTC](https://discuss.elastic.co/t/configuring-a-cluster-with-public-certificates/342430/2 "2023-10-04T10:39:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.