Elasticsearch SSL Certificate Invalid

Elastic Stack Elasticsearch
1

Software: Elastics v5.5.0
Hardware: Ubuntu 20
I am trying to set up SSL/TLS on the cluster.
Steps I followed:

bin/x-pack/certgen

      Please enter the desired output file [/home/es/config/x-pack/csr-bundle.zip]:
    Enter instance name: node01
    Enter name for directories and files [node01]:
    Enter IP Addresses for instance (comma-separated if more than one) []: 127.0.0.1
    Enter DNS names for instance (comma-separated if more than one) []: localhost
    Would you like to specify another instance? Press 'y' to continue entering instance information:

Certificates got generated after these steps.

Elasticsearch.yml configuration:

xpack.ssl.certificate: /etc/elasticsearch/x-pack/certificate-bundle/node01/node01.crt
xpack.ssl.certificate_authorities: ["/etc/elasticsearch/x-pack/certificate-bundle/ca/ca.crt"]
xpack.security.transport.ssl.enabled: true
xpack.security.http.ssl.enabled: true

After restarting the node, When I access the node https://localhost:9200 from Chrome
I got NET::ERR_CERT_AUTHORITY_INVALID in the browser.

The browser still gives me warning the connection is insecure. Do I miss something?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.