# Need help with SSL config **URL:** \ **Category:** Logstash\ **Created:** [November 13, 2015, 8:02pm UTC](https://discuss.elastic.co/t/need-help-with-ssl-config/34559 "2015-11-13T20:02:37Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![CraigFoote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/craigfoote/32/4571_2.png) [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Post date:** [November 13, 2015, 8:02pm UTC](https://discuss.elastic.co/t/need-help-with-ssl-config/34559/1 "2015-11-13T20:02:37Z")
I'm trying to use the tcp input plugin but having trouble understanding the various SSL options. I know I need to set the ssl\_enable to true but am unsure of the other options: ssl\_cacert, ssl\_cert, ssl\_key, and ssl\_key\_passphrase. Can someone provide a typical scenario where encrypted messages are sent to and received by the tcp input plugin? Something a little more than "The path to the SSL certificate the connection should use" would be helpful. I understand the basics of SSL but find it hard to map what I know onto these options. For example, is ssl\_cacert or ssl\_cert the public key to decrypt the messages? Or is it the ssl\_key? Are all always needed? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:22am UTC](https://discuss.elastic.co/t/need-help-with-ssl-config/34559/2 "2017-07-06T05:22:52Z")