Hello, I was wondering if it was possible to create ES node certs using an existing CA without a CA key? The only thing I have found in the documentation is that you can only create ES node certs with existing CA if it has the CA key. Which is done by using the example command: /usr/share/elastics…

I was wondering if it was possible to create ES node certs using an existing CA without a CA key? This is not possible. The CA certificate is public, if it were possible than anyone on the internet could've created valid certs and join your cluster.

Creating ES Node Certs Without CA Key?

Elastic Stack Elasticsearch

system (system) Closed October 27, 2020, 4:08pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Elasticsearch didn't create ca.key. How can i create new key/crt for new instances? Elasticsearch elastic-stack-security	3	1493	February 17, 2020
Create new cert and key from existing ca.crt : elasticsearch-certutil Elasticsearch elastic-stack-security	3	5083	June 24, 2020
Request for help/direction to create node certificates/keys using own CA certificates in place Elasticsearch elastic-stack-security	4	305	December 19, 2022
CA generated without key using instances.yml Elasticsearch elastic-stack-security	1	429	February 21, 2022
Generation new ssl keys for a new node Elasticsearch elastic-stack-security	5	571	December 29, 2021

Creating ES Node Certs Without CA Key?

Related topics