# Logstash filter plugin needs certificate with dns name **URL:** \ **Category:** Logstash\ **Created:** [December 21, 2020, 3:55pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281 "2020-12-21T15:55:58Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 21, 2020, 3:55pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/1 "2020-12-21T15:55:58Z")
Hi i tried to configure security in elkstack and wanted a common certificate in all nodes environments but logstash fillter plugin needs dns name to speicified else wont work, any other solution? ---
**Author:** ![Mohammad\_Mousavi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohammad_mousavi/32/56508_2.png) [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Post date:** [December 21, 2020, 3:57pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/2 "2020-12-21T15:57:53Z")
Can you reply logstash config ? ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 21, 2020, 4:12pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/3 "2020-12-21T16:12:14Z")
![20201221_213047](https://us1.discourse-cdn.com/elastic/original/3X/9/a/9ac3ebbf78c0b91ddd5131fb026dfb931f52adc0.jpeg) Sorry cannot post full cfg file for security reasons ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 21, 2020, 4:12pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/4 "2020-12-21T16:12:47Z")
I have used ca\_file parameter ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 21, 2020, 10:02pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/5 "2020-12-21T22:02:43Z")
Please don't post pictures of text, they are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 🙂 ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 22, 2020, 4:34am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/6 "2020-12-22T04:34:43Z")
```auto Filter{ elasticsearch { hosts=> index=> feilds => user => user password => pass ca_file => path/toCaCert }} ``` This is just a part of code not complete there is no error in cfg file but when i want to use a common certificate without mentioning host name which filter section doesnt allow it needs certificate mentioned with dns name only ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 22, 2020, 5:19am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/7 "2020-12-22T05:19:38Z")
Can you please post the text of the error you are seeing. ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 22, 2020, 6:19am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/8 "2020-12-22T06:19:03Z")
certificate subject name does not match target host name. I have generated tge certificate using elastic certutill tool ---
**Author:** ![bshaw](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@bshaw](https://discuss.elastic.co/u/bshaw)\ **Post date:** [December 22, 2020, 3:05pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/9 "2020-12-22T15:05:18Z")
According to the [docs](https://www.elastic.co/guide/en/elasticsearch/reference/current/certgen.html#certgen-silent), at least in silent mode, you can add multiple DNS names (item 3) which will be put in to the alternate names section of the certificate. If you aren't using DNS, then you will want to add your IP addresses instead with item 2. This way, the certificate can be valid for more than one host. ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 22, 2020, 3:42pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/10 "2020-12-22T15:42:16Z")
What if i want a common certificate across all clusters. How many nodes can i specify and can they belong to different clusters? ---
**Author:** ![bshaw](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@bshaw](https://discuss.elastic.co/u/bshaw)\ **Post date:** [December 22, 2020, 4:04pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/11 "2020-12-22T16:04:25Z")
I don't think there is an actual limit to the number of alternate names that can be added to a certificate but, there is definitely a practical one. If you have more than a few hosts, you may want to consider creating one or more wildcard certificates instead. There is much less maintenance required; typing an asterisk (\*) is much less effort then an ever changing list of host names. ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 22, 2020, 5:15pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/12 "2020-12-22T17:15:02Z")
Can you let me know how to create this wildcard certificate ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 24, 2020, 10:46am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/13 "2020-12-24T10:46:07Z")
Please reply ---
**Author:** ![Moni\_Kherajani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moni_kherajani/32/81203_2.png) [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Post date:** [December 24, 2020, 10:48am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/14 "2020-12-24T10:48:05Z")
Also what if the certificate for internode communication and TLS expires will ELK stop working ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 21, 2021, 10:48am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281/15 "2021-01-21T10:48:14Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.