Password protect elasticsearch 7 cluster

Elastic Stack Elasticsearch
1

I have installed elasticsearch 7 on Ubuntu. I have a basic licence. Now I want to password protect the cluster. I set xpack.security.enabled: true in elasticsearch.yml and run elasticsearch. And I get the following message:

Transport SSL must be enabled if security is enabled on a [basic] license. Please set [xpack.security.transport.ssl.enabled] to [true] or disable security by setting [xpack.security.enabled]

Questions:

  1. Is it possible to password protect the cluster without enabling SSL?
  2. If I install SSL certificate on cluster nodes, would I also need to install SSL on my web server to communicate with elasticsearch?
2

It's heaps easier for people to assist you if you don't create so many threads around the same problem, and/or create a new topic and then just delete all the contents.

Let's carry on the conversation in this one - Setting xpack.security.enabled = true