# How xpack.license.self\_generated.type: basic setting is really working?

**URL:** https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210
**Category:** Elasticsearch
**Created:** [September 27, 2018, 2:30pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210 "2018-09-27T14:30:50Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![webofmars](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/webofmars/32/9532_2.png) [@webofmars](https://discuss.elastic.co/u/webofmars)
#### Post date: [September 27, 2018, 2:30pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210/1 "2018-09-27T14:30:51Z")

</div>

Running a demo with ES 6.4.0 i have a strange feeling about how is handled the setting `xpack.license.self_generated.type: basic` in `elasticsearch.yml`.

My need is to have SSL (encryption in transit) and no certs authentication beetween nodes or clients.  
Reeding the doc i would assume that this is not possible without a valid gold (at least subscription).

But when trying it and setting `xpack.license.self_generated.type: basic` in order to limit the license to the basic subset it seems that the xpack.ssl.\* setup are honored correctly.

ex: `openssl s_client -CAfile ./certs/ca.pem -showcerts -connect localhost:9300`

```auto
SSL handshake has read 1388 bytes and written 194 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol : TLSv1.2
    Cipher : ECDHE-RSA-AES256-SHA384
    Session-ID: 5BACE946CA28B152230EBB34E80E8E0A4F836A965791D0C01214120964BEEBA0
    Session-ID-ctx:
    Master-Key: 8FDDF779120F8C8FEAFA4769F962B342B5A91E2E8F91A847E416E0B3B0CDC55E92A98DA2C486C77687064E06EA5E79EC
    Key-Arg : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1538058566
    Timeout : 300 (sec)
    Verify return code: 0 (ok)
---

```

or

`curl --cacert certs/ca.pem -I https://localhost:9200`:

```auto
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
content-length: 500

```

Any explanation to what i am missing here ?

---

<div class="post-metadata">

### Author: ![webofmars](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/webofmars/32/9532_2.png) [@webofmars](https://discuss.elastic.co/u/webofmars)
#### Post date: [September 27, 2018, 2:37pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210/2 "2018-09-27T14:37:44Z")

</div>

In case it can explain something, this is a fresh install on Ubuntu 16.04 on digital ocean from officail ES repos...

---

<div class="post-metadata">

### Author: ![xeraa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xeraa/32/48181_2.png) [@xeraa](https://discuss.elastic.co/u/xeraa)
#### Post date: [September 27, 2018, 2:50pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210/3 "2018-09-27T14:50:47Z")

</div>

Can you post the output of `GET /_xpack/license` please? Just to make sure that the trial isn't enabled for some reason.

---

<div class="post-metadata">

### Author: ![webofmars](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/webofmars/32/9532_2.png) [@webofmars](https://discuss.elastic.co/u/webofmars)
#### Post date: [September 27, 2018, 4:09pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210/4 "2018-09-27T16:09:59Z")

</div>

hi @xeraa !

without `xpack.license.self_generated.type: basic` :

```auto
  "license" : {
    "status" : "active",
    "uid" : "d55f8059-6314-49e8-86e8-9d8df79efcb7",
    "type" : "basic",
    "issue_date" : "2018-09-27T16:00:17.880Z",
    "issue_date_in_millis" : 1538064017880,
    "max_nodes" : 1000,
    "issued_to" : "kibana",
    "issuer" : "elasticsearch",
    "start_date_in_millis" : -1
  }
}

```

with `xpack.license.self_generated.type: basic`:

```auto
{
  "license" : {
    "status" : "active",
    "uid" : "4856423b-09e1-4eac-bd81-6c3257aa6b47",
    "type" : "basic",
    "issue_date" : "2018-09-27T16:08:10.648Z",
    "issue_date_in_millis" : 1538064490648,
    "max_nodes" : 1000,
    "issued_to" : "kibana",
    "issuer" : "elasticsearch",
    "start_date_in_millis" : -1
  }
}

```

So it seems that this is activated whatever you do ? right ?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 25, 2018, 4:10pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210/5 "2018-10-25T16:10:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
