# I want to make new ssl certificate and key for elasticsearch

**URL:** <https://discuss.elastic.co/t/i-want-to-make-new-ssl-certificate-and-key-for-elasticsearch/311469>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [August 5, 2022, 4:28am UTC](https://discuss.elastic.co/t/i-want-to-make-new-ssl-certificate-and-key-for-elasticsearch/311469 "2022-08-05T04:28:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![hellocomputer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hellocomputer/32/100718_2.png) [@hellocomputer](https://discuss.elastic.co/u/hellocomputer)\
**Post date:** [August 5, 2022, 4:28am UTC](https://discuss.elastic.co/t/i-want-to-make-new-ssl-certificate-and-key-for-elasticsearch/311469/1 "2022-08-05T04:28:38Z")

</div>

Hello.  
I use ubuntu 20.04 version (server) and elasticsearch 8.3.2 version.

Then, I want to make new certification and key for ssl secure elasticsearch. It already set ssl key using 'http.p12'. But i didn't set this. It is default setting. I also have to secure for kibana and logstash. Therefore, i have to get 'crt, key '. I heard that kibana can't use p12 certification.

I try to setting security using this url.

> **[Set up basic security for the Elastic Stack plus secured HTTPS traffic |...](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-basic-setup-https.html)**

But, I failed. My elasticsearch log said

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/a/3af899a9333125761d4fc3dc796da58b93fcb4b3.jpeg)  
What is meaning in this logfile?

---

<div class="post-metadata">

**Author:** ![zqc0512](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zqc0512/32/32141_2.png) [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Post date:** [August 5, 2022, 6:30am UTC](https://discuss.elastic.co/t/i-want-to-make-new-ssl-certificate-and-key-for-elasticsearch/311469/2 "2022-08-05T06:30:05Z")

</div>

xpack.security.http.ssl.client\_authentication: "none"

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 2, 2022, 6:30am UTC](https://discuss.elastic.co/t/i-want-to-make-new-ssl-certificate-and-key-for-elasticsearch/311469/3 "2022-09-02T06:30:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.