Elasticsearch keystore reloadable settings

Elastic Stack Elasticsearch
1

Hello
we are using Elasticsearch 7.16.3 with ssl enabled.
We have stored following settings in the Elasticsearch-keystore for that-

xpack.security.http.ssl.keystore.secure_password
xpack.security.http.ssl.truststore.secure_password
xpack.security.transport.ssl.keystore.secure_password
xpack.security.transport.ssl.truststore.secure_password

Whenever certificate password is changed then Elasticsearch-keystore still contains old password.
I have tried with reloadable Elasticsearch security settings but it didn't work.

Please confirm, if there is a way to reload above security settings.

Many Thanks In Advance!!
Regards
Dheeraj

2

They are not reloadable. You have to restart the node for any changes to the secure_password.

3

Thanks a lot for the quick answer. Even restart doesn't refresh Elasticsearch-keystore.

4

What do you mean by this? You need update the passwords stored in the keystore before they can be picked up by node restart.

5

I thought password will be updated automatically. Thanks a lot for your inputs.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.