PKCS#12 vs PEM for Elastic Cluster

Elastic Stack Elasticsearch
1

I am running a cluster on 7.17 and am looking at updating the TLS certs for internode communication. Currently, I'm using PEM certs for this, but I saw that the documentation for both setting up basic security and updating existing certs have instructions based on PKCS#12 and generating a .p12 file instead of .crt/.key files.

I was wondering if there was a reason that the documentation doesn't include any steps for setting up or updating certs via PEM (or if they're out there, can someone point me in the right direction?). Is PEM not recommended/soon-to-be deprecated?

Thanks in advance!

2

That is definitely not the case. The documentation uses PKCS12 file as example because it is often easier to manage one file than multiple PEM files.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.