# Elastic search over HTTPS Channel **URL:** \ **Category:** Elasticsearch\ **Created:** [June 10, 2019, 4:50pm UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031 "2019-06-10T16:50:13Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![manoj1234](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@manoj1234](https://discuss.elastic.co/u/manoj1234)\ **Post date:** [June 10, 2019, 4:50pm UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031/1 "2019-06-10T16:50:13Z")
Hello, I am currently working on communication of elasticsearch, fscrawler and kibana over HTTPS channel. I am pretty much successfull in it. For this, I used self signed certificates and followed the documentation given on home site of elasaticsearch. Problem is that, I am able to access HTTPS service of elasticsearch from a different working station (let's say machine X) which in the same network as the server, but machine X doesn't have the self signed certificate that I used on server machine. My doubt is how I am able to access the service of elasticsearch from X machine, since i don't have self signed certificate installed there. The whole purpose of HTTPS then goes in vain. NOTE:- I need to add exception in the browser to access elasticsearch's service as it says certificate is not trusted. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 10, 2019, 5:28pm UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031/2 "2019-06-10T17:28:38Z")
The whole purpose of HTTPS is to encrypt the traffic, which does not require you to have certificates on the client machines. If you want to do authentication using certificates you should look at configuring [PKI](https://www.elastic.co/guide/en/elastic-stack-overview/7.1/pki-realm.html). ---
**Author:** ![manoj1234](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@manoj1234](https://discuss.elastic.co/u/manoj1234)\ **Post date:** [June 10, 2019, 6:00pm UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031/3 "2019-06-10T18:00:11Z")
Thanks for replying....... Completely agreed with your statement, but my point is anyone can access my data who knows connection string i.e. host and port no. where elastic search is running (from any terminal within the network). All I want only those terminals should have access who have the same certificate as in the server machine. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 10, 2019, 6:06pm UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031/4 "2019-06-10T18:06:27Z")
That is where PKI comes in. ---
**Author:** ![manoj1234](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@manoj1234](https://discuss.elastic.co/u/manoj1234)\ **Post date:** [June 11, 2019, 1:41am UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031/5 "2019-06-11T01:41:13Z")
Thanks again @Christian_Dahlqvist. How can i make sure that my traffic is encrypted. Is there any verification mechanism for the same ?? I still believe that only thing that has changed is that, in connection string "http" is replaced with "https", none of my traffic is encrypted. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 11, 2019, 2:05am UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031/6 "2019-06-11T02:05:02Z")
> [@manoj1234](#): > > none of my traffic is encrypted The S in HTTPS stands for Secure. As in encryption. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 9, 2019, 2:05am UTC](https://discuss.elastic.co/t/elastic-search-over-https-channel/185031/7 "2019-07-09T02:05:05Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.