How can I generate root-ca.pem file for Elasticsearch

How can I generate root-ca.pem file for Elasticsearch ,Would be great if some help me

Hi,

To generate a root-ca.pem file for Elasticsearch, you can use the elasticsearch-certutil tool that comes with Elasticsearch.

For more information, you can refer to the following documentation:

Regards

Many thanks for the reply ,do you think is it a correct way to generate root-ca
bin/elasticsearch-certutil ca --ca-dn "CN=root-ca" --days 365 --pem --out /etc/elasticsearch/root-ca.pem