# Enabling SSL in X-Pack and Active Directory

**URL:** <https://discuss.elastic.co/t/enabling-ssl-in-x-pack-and-active-directory/79825>\
**Category:** Elasticsearch\
**Created:** [March 24, 2017, 1:57am UTC](https://discuss.elastic.co/t/enabling-ssl-in-x-pack-and-active-directory/79825 "2017-03-24T01:57:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![arianayay](https://avatars.discourse-cdn.com/v4/letter/a/f4b2a3/32.png) [@arianayay](https://discuss.elastic.co/u/arianayay)\
**Post date:** [March 24, 2017, 1:57am UTC](https://discuss.elastic.co/t/enabling-ssl-in-x-pack-and-active-directory/79825/1 "2017-03-24T01:57:26Z")

</div>

Hi All,

I would like to know how PEM is created using Certgen? Upon checking.. I only have .crt and .key format?

Thanks!

---

<div class="post-metadata">

**Author:** ![joshbressers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshbressers/32/42332_2.png) [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Post date:** [March 24, 2017, 12:34pm UTC](https://discuss.elastic.co/t/enabling-ssl-in-x-pack-and-active-directory/79825/2 "2017-03-24T12:34:22Z")

</div>

The PEM is just another way to encode the .crt file. You should be able to convert the crt if you have openssl installed

openssl x509 -in cert.crt -text -noout

---

<div class="post-metadata">

**Author:** ![arianayay](https://avatars.discourse-cdn.com/v4/letter/a/f4b2a3/32.png) [@arianayay](https://discuss.elastic.co/u/arianayay)\
**Post date:** [March 25, 2017, 1:03am UTC](https://discuss.elastic.co/t/enabling-ssl-in-x-pack-and-active-directory/79825/4 "2017-03-25T01:03:20Z")

</div>

Hi,

Regarding the certgen.. May i know if i have placed the correct values:

(From your Site)  
Please enter the desired output file [/home/es/config/x-pack/certificate-bundle.zip]:  
Enter instance name: node01  
Enter name for directories and files [node01]:  
Enter IP Addresses for instance (comma-separated if more than one) []: 10.10.0.1  
Enter DNS names for instance (comma-separated if more than one) []: [node01.mydomain.com](http://node01.mydomain.com),node01

(From our end)  
Please enter the desired output file [/home/es/config/x-pack/certificate-bundle.zip]:  
Enter instance name: **Hostname**  
Enter name for directories and files [Hostname]:  
Enter IP Addresses for instance (comma-separated if more than one) []: **11.22.33.44 (Sample IP of hostname only)**  
Enter DNS names for instance (comma-separated if more than one) []: **[Hostname.com](http://Hostname.com)**

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 22, 2017, 1:03am UTC](https://discuss.elastic.co/t/enabling-ssl-in-x-pack-and-active-directory/79825/5 "2017-04-22T01:03:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.