Regenerate the SSL Certificate that was auto-generated on setup of ElasticSearch

[stephenb (Stephen Brown)]

Hi @frdh-samuelw

Seems a lot like this post

Are the Self Signed Certs bound by IP / Hostname

Hi, We have a cluster in which we have enabled TLS security. To enable the security we used the elastic cert utility to generate the cert and CA. While generation of the certs or the CA any of the prompts did not ask us about the Hostnames or IP. We generated just one certificate and used that cert in all the nodes. Now the machines are moving to new IP and we are confused if the previous cert which is working now will work or not. Are the certs generated with elasticsearch cert-util are bound …

What version are you on?

@frdh-samuelw

bin/elasticsearch-certutil

command but when I do that it says that there is "no such file or directory". I am unable to use that command, and based on my reading of the webpage:

Where are you running that from? /
How did you install?

But yes you need to regenerate the Certs and then make sure if you created

elasticsearch-certutil | Elastic Documentation