# Elasticsearch configure the client to trust this certificate

**URL:** <https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [December 28, 2020, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710 "2020-12-28T06:57:19Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![tusharnemade](https://avatars.discourse-cdn.com/v4/letter/t/67e7ee/32.png) [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Post date:** [December 28, 2020, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/1 "2020-12-28T06:57:19Z")

</div>

Hi Team

I am using Elasticsearch Version 7.8.0

I have generated CA Certificate and keys using "elasticsearch-certutil" utility.

These certificates are in format PKCS#12.

Could you please help me in configure the client to trust this certificate.

Thanks  
Tushar Nemade

---

<div class="post-metadata">

**Author:** ![tusharnemade](https://avatars.discourse-cdn.com/v4/letter/t/67e7ee/32.png) [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Post date:** [December 28, 2020, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/2 "2020-12-28T08:40:06Z")

</div>

Can someone please help me

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 28, 2020, 9:11am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/3 "2020-12-28T09:11:12Z")

</div>

Please be patient in waiting for responses to your question and refrain from pinging multiple times asking for a response or opening multiple topics for the same question. This is a community forum, it may take time for someone to reply to your question. For more information please refer to the [Community Code of Conduct](https://www.elastic.co/community/codeofconduct) specifically the section "Be patient". Also, please refrain from pinging folks directly, this is a forum and anyone that participates might be able to assist you.

If you are in need of a service with an SLA that covers response times for questions then you may want to consider talking to us about a [subscription](https://www.elastic.co/subscriptions).

It's fine to answer on your own thread after 2 or 3 days (not including weekends) if you don't have an answer.

---

<div class="post-metadata">

**Author:** ![tusharnemade](https://avatars.discourse-cdn.com/v4/letter/t/67e7ee/32.png) [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Post date:** [December 28, 2020, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/4 "2020-12-28T09:53:16Z")

</div>

Hello David

Please excuse me , if my actions indicated that I am being impatient and pushing in this open-forum. I did not intended the same.

Thanks  
Tushar Nemade

---

<div class="post-metadata">

**Author:** ![austinsonger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austinsonger/32/78994_2.png) [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Post date:** [December 29, 2020, 6:09am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/5 "2020-12-29T06:09:58Z")

</div>

You can try what I do. If it is important question or urgent, I post the same question in here and on Reddit [https://www.reddit.com/r/elasticsearch](https://www.reddit.com/r/elasticsearch)

It helps getting answers from multiple sources cause helps with the understanding part of it. Everyone don't explain things in the best way.

---

<div class="post-metadata">

**Author:** ![tusharnemade](https://avatars.discourse-cdn.com/v4/letter/t/67e7ee/32.png) [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Post date:** [December 29, 2020, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/6 "2020-12-29T09:10:20Z")

</div>

Hi

I would have registered on [reddit.com](http://reddit.com) , but in my official network , this link is blocked. Hene proceeding with same would be not feasible for me.

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 30, 2020, 5:58am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/7 "2020-12-30T05:58:57Z")

</div>

> [@tusharnemade](#):
>
> Could you please help me in configure the client to trust this certificate.

Which client? There is no single answer that works for every possible client.

---

<div class="post-metadata">

**Author:** ![tusharnemade](https://avatars.discourse-cdn.com/v4/letter/t/67e7ee/32.png) [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Post date:** [December 30, 2020, 6:25am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/8 "2020-12-30T06:25:38Z")

</div>

Hi Tim

Client in my case if another Cluster of "Elasticsearch" of same version 7.8.0

I am in need to trust both cluster's each other CA Certificate.

---

<div class="post-metadata">

**Author:** ![tusharnemade](https://avatars.discourse-cdn.com/v4/letter/t/67e7ee/32.png) [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Post date:** [December 31, 2020, 5:39am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/9 "2020-12-31T05:39:56Z")

</div>

Hi

Could someone please help me to get how to pass the ALIAS name for Instance and for Certificate using `elasticsearch-certutil ca` in elasticsearch.

Thanks  
Tushar Nemade

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 31, 2020, 8:37am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/10 "2020-12-31T08:37:10Z")

</div>

It's a lot easier if you please create a single thread for your questions in future 🙂

See [Elasticsearch Cross Cluster Search Implementation](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-implementation/259708/14), as you have a solution for this there.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 31, 2020, 8:37am UTC](https://discuss.elastic.co/t/elasticsearch-configure-the-client-to-trust-this-certificate/259710/11 "2020-12-31T08:37:13Z")

</div>


