Generate certificates after expiring

Elastic Stack Elasticsearch
1

What commands does the Ubuntu deb package installer script execute to generate HTTPS certificates? I would like to regenerate certificates, but the commands generate completely different file names etc. - I'm lost in this.

Can I somehow ignore only expired dates of certyficates or generate them from advice for more years? Installer generate only for 2y.

2

Hi @cyberzlo,

You should be able to generate a new certificate using the elasticsearch-certutil tool by following the steps in the documentation:

./bin/elasticsearch-certutil http

Hope that helps!

3

I know but it will generate other filenames etc. I am not sure which is which and why official installator do it diffrent way? Can I replicate what is done by script to have same reasults with same filenames/paths?